OSX.RSPlug.A

OSX.RSPlug.A is a Trojan horse that runs on Macintosh OS X and changes the DNS settings on the compromised computer.

For further information please read: The Double Attack: Windows Attack and now also Mac Attack

Protection

• Initial Rapid Release version October 31, 2007 revision 051
• Latest Rapid Release version November 13, 2009 revision 034
• Initial Daily Certified version November 1, 2007 revision 003
• Latest Daily Certified version November 13, 2009 revision 033
• Initial Weekly Certified release date November 7, 2007

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low
• Payload: Modifies the DNS settings on the compromised computer.

Distribution

• Distribution Level: Low