INTEGO SECURITY MEMO - April 2, 2008
Rogue Tool "iMunizator" Deletes Random Files While Claiming to
"Reclaim Wasted Space"

Exploit: OSX.AngeloScan, "iMunizator"

Discovered: March 30, 2008

Risk: Low

Description: A "rogue tool", called iMunizator, is available for sale on a web site, claiming to be a security tool for Mac OS X. This programs claims that “The imbibed [sic] set of features locates all the junk and useless data on your computer and deletes them to reclaim the wasted space.” In addition to questionable English in the description, the program itself is not only a rip-off, but it is dangerous: while it may clean out some files such as caches, it also deletes more important files, without users even knowing what it removed.

This program follows another "scareware" program called Macsweeper, created by the same people, whose description and actions are exactly the same. Neither of these programs serve any purpose, and are, in fact, dangerous, because of the way they randomly delete files. For this reason, Intego protects against this program by warning users who try to launch it.

Intego VirusBarrier X5, in its virus definitions dated March 27, 2008, blocks this program (which we have called OSX.AngeloScan), so even if users accidentally get a copy of it and try to run it, they will be alerted that the program is dangerous.

About Intego

Intego develops and sells Internet security and privacy software exclusively for Macs and iOS devices.

Intego provides the widest range of software to protect users and their Macs and iOS devices from the dangers of the Internet. Intego's multilingual software and support regularly receives awards from Mac magazines, and protects more than one million users in over 100 countries. Intego has headquarters in the USA, France and Japan. For further information, visit www.intego.com.

home | contact