{"id":2817,"date":"2010-11-01T16:54:31","date_gmt":"2010-11-01T22:54:31","guid":{"rendered":"http:\/\/royceeddington.com\/?p=2817"},"modified":"2010-11-01T16:55:49","modified_gmt":"2010-11-01T22:55:49","slug":"how-to-get-rid-of-the-mac-virus-boonana-trojan-horse-aka-trojan-osx-boonana-a","status":"publish","type":"post","link":"https:\/\/royceeddington.com\/?p=2817","title":{"rendered":"How to get rid of the mac Boonana Trojan Horse (AKA trojan.osx.boonana.a)"},"content":{"rendered":"<p>The website <a href=\"http:\/\/www.securemac.com\/boonana-bulletin.php\">Secure Mac<\/a> has found a new Trojan Horse that is making the rounds. What&#8217;s interesting about this one is that it&#8217;s specifically cross-platform, meaning both Macs and PCs are targeted.<\/p>\n<p>What&#8217;s worse is that this Trojan Horse is spreading through lots of social networking sites. (Which usually means a widespread outbreak is imminent.)<\/p>\n<p>The Secure Mac website says the Trojan Horse is &#8220;currently appearing as a link in messages on social networking sites with the subject <strong>&#8220;Is this you in this video?&#8221;<\/strong>  When a user clicks the infected link, the trojan initially runs as a Java applet, which downloads other files to the computer&#8230; When run, the installer modifies system files to bypass the need for passwords, allowing outside access to all files on the system&#8230; While running, the trojan horse hijacks user accounts to spread itself further via spam messages.&#8221;<\/p>\n<p>Fun!<\/p>\n<p>Secure Mac <a href=\"http:\/\/www.securemac.com\/boonana\/\">posted a free cure for this Trojan Horse that you can download here<\/a>.<\/p>\n<p>Once you&#8217;ve downloaded the virus removal app, double click on the BTRT.DMG icon and then double click on the &#8220;Boonana Trojan Removal Tool&#8221; drive that appears on your desktop.<\/p>\n<p>From there, you can double click on the Boonana Removal Tool icon&#8230;<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239023\/\" title=\"Boonana 01 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm5.static.flickr.com\/4037\/5137239023_efbfa619a6_m.jpg?resize=169%2C89\" width=\"169\" height=\"89\" alt=\"Boonana 01\" \/><\/a><\/center><BR><BR><\/p>\n<p>&#8230;then click on the OPEN button when prompted&#8230;<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239155\/\" title=\"Boonana 02 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm2.static.flickr.com\/1411\/5137239155_937e941926.jpg?resize=500%2C187\" width=\"500\" height=\"187\" alt=\"Boonana 02\" \/><\/a><\/center><BR><BR><\/p>\n<p>&#8230;ACCEPT the license agreement&#8230;<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239209\/\" title=\"Boonana 03 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm5.static.flickr.com\/4084\/5137239209_e05085874e.jpg?resize=476%2C373\" width=\"476\" height=\"373\" alt=\"Boonana 03\" \/><\/a><\/center><BR><BR><\/p>\n<p>&#8230;then press the SCAN button. That&#8217;s it.<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239243\/\" title=\"Boonana 04 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm2.static.flickr.com\/1182\/5137239243_b8c33c0248.jpg?resize=481%2C238\" width=\"481\" height=\"238\" alt=\"Boonana 04\" \/><\/a><\/center><BR><BR><\/p>\n<p>When the scan is complete (and it will only take a few seconds), you will see the results (and a small sales pitch for their software.)<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239289\/\" title=\"Boonana 05 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm2.static.flickr.com\/1404\/5137239289_228d0ebdb3.jpg?resize=486%2C238\" width=\"486\" height=\"238\" alt=\"Boonana 05\" \/><\/a><\/center><BR><BR><\/p>\n<p>Just go to FILE and QUIT after the scan is complete!<\/p>\n<p><center><a href=\"http:\/\/www.flickr.com\/photos\/royceeddington\/5137239329\/\" title=\"Boonana 06 by Royce Eddington, on Flickr\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/farm2.static.flickr.com\/1163\/5137239329_2d1a139784.jpg?resize=322%2C201\" width=\"322\" height=\"201\" alt=\"Boonana 06\" \/><\/a><\/center><BR><BR><\/p>\n<p>You can read more about it <a href=\"http:\/\/www.securemac.com\/boonana-bulletin.php\">on the Secure Mac website here.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The website Secure Mac has found a new Trojan Horse that is making the rounds. What&#8217;s interesting about this one is that it&#8217;s specifically cross-platform, meaning both Macs and PCs are targeted. What&#8217;s worse is that this Trojan Horse is &hellip; <a href=\"https:\/\/royceeddington.com\/?p=2817\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[5],"tags":[],"class_list":["post-2817","post","type-post","status-publish","format-standard","hentry","category-tech"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p6Pfyw-Jr","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/2817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2817"}],"version-history":[{"count":4,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/2817\/revisions"}],"predecessor-version":[{"id":2821,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/2817\/revisions\/2821"}],"wp:attachment":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}