Comments on: Fake YouTube Installs OS X TrojanDNSChanger http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/ What Do You Think Is The Biggest Threat To Mac Users' Security? Thu, 24 Nov 2011 17:54:28 +0000 hourly 1 http://wordpress.com/ By: Ellis Thorne http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-75 Thu, 18 Sep 2008 09:38:18 +0000 http://ithreats.wordpress.com/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-75 Can someone give me a dunces guide to how to remove this as it keeps redirecting me to advertising websites and it’s driving me mad

]]> By: Methusela Cebrian Ferrer http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-57 Sun, 10 Aug 2008 13:36:11 +0000 http://ithreats.wordpress.com/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-57 You may delete the following drop files:

/Library/Internet Plug-Ins/plugins.settings
/Library/Internet Plug-Ins/sendreq (usually the malware deletes this, but just double check)
/Library/Internet Plug-Ins/QuickTime.xpt
/Library/Internet Plug-Ins/Mozillaplug.plugin

And modify your DNS Settings (System Preference > Network > Advance > DNS) to your legitimate DNS IP address.

Perhaps, the detailed analysis of this trojan may also help:
http://ithreats.wordpress.com/2008/01/11/analysis-of-osx-trojan-dns-changer/

If you think, it poses different behavior please feel free to send me further information such as URL link and the DMG file so I can investigate. Thanks!

]]> By: tim http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-55 Sun, 03 Aug 2008 17:29:18 +0000 http://ithreats.wordpress.com/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-55 If this is installed what recourse do I have for uninstalling it?

]]> By: Methusela Cebrian Ferrer http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-33 Wed, 11 Jun 2008 00:38:21 +0000 http://ithreats.wordpress.com/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-33 This must be something new. Could you send me a copy in this email address iThreatResearch(at)g m a i l (dot) com. I’ll verify and make an analysis as soon as I received the file. Thanks!

]]> By: John Pettitt http://ithreats.net/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-32 Tue, 10 Jun 2008 05:25:29 +0000 http://ithreats.wordpress.com/2008/05/01/fake-youtube-installs-os-x-trojandnschanger/#comment-32 I found a new variety of this that tries to install a replacement for the apple supplied VerifiedDownloadPlugin as well as the other DNS tricks / obfuscation. Ping me by email if you want a copy.

]]>