Replies

I have been searching forums... and so far, none of the 600,000 infected have reported they have been infected. Strange, don’t you think? It’s easy to check for and remove this infection, but no one is finding it.

It’s easy to check for and remove this infection, but no one is finding it.

I know of two people who have found the trojan, both were found because Little Snitch was blocking a connection from .rserv to cuojshtbohnt.com.

Apple Discussion Forums has a thread detailing exactly what they were experiencing. I walked one of them through removing it, and if I understand the Apple discussions correctly, the fact that they had Little Snitch installed and they properly blocked it, it did no harm. As a matter of fact, it may have deleted part of itself when it detected Little Snitch from what some are saying, but that seems odd since Little Snitch blocked it in the first place.

It pisses me off to hear people talking about this as if it's a virus. It's a trojan and there is a huge difference. And both of the people I know who got it, they have teenagers and I'm pretty sure they don't monitor their kids' internet usage (don't get me started).

> ...so far, none of the 600,000 infected have reported they have been infected. Strange, don’t you think?

There are undoubtedly SOME infected machines. Might be in the hundreds or even thousands. Over half a million? How is that number generated? By Russian anti-virus "Doctor Web"'s Marketing Department with a dart board, most likely.

Is there a botnet? Well, let's wait a little while and see.

I doubt it. I think this is another case of typical anti-virus bullshit marketing, taking a known small problem and trumpeting it as though it's the End Of The World As We Know It.

In a month or two, we'll know. The Apple Haters can show me the headlines... THEN. Until then, I call FUD too.