This threat has been renamed to Trojan:MacOS_X/Zonsterarch.A.

What to do now

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution.

The summary tab has all the available details for this threat.


System changes

The following system changes may indicate the presence of this malware:

  • When trying to install a program, you are prompted by the installer to send payment via SMS or another web-based payment service.
  • The installer appears similar to the following:


Alert level: Severe
This entry was first published on: Dec 13, 2012
This entry was updated on: Apr 15, 2013

This threat is also detected as:
  • Trojan:MacOS_X/Zonsterarch.A (Microsoft)
  • Trojan.SMSSend.3666 (Dr.Web)
  • OSX/Hoax.ArchSMS.AA (ESET)
  • OSX/ArchSMS-J (Sophos)