Notice
This is a Low-Profiled Threat Notice for OSX/IWService

Justification
OSX/IWService has been deemed Low-Profiled due to media attention at http://www.theregister.co.uk/2009/01/22/mac_trojan_attack/.

OSX/IWService is referred to as "iServices.A" in the article at www.theregister.co.uk.

Read About It
Information about OSX/IWService is located on VIL at: http://vil.nai.com/vil/content/v_153893.htm

Detection
OSX/IWService was first discovered on January 22, 2009 and detection will be added to the 5504 dat files (Release Date: January 23, 2009).

If you suspect you have OSX/IWService, please submit a sample to http://www.webimmune.net

Risk Assessment Definition
For further information on the Risk Assessment and Avert Labs Recommended Actions please see: http://www.mcafee.com/us/threat_center/out...assessment.html

For breaking security information from McAfee® Avert® Labs visit:

McAfee Avert Labs Blog
http://www.avertlabs.com/research/blog