iBotnet is network of zombie Macs (yes, the network is more elegant than a Windows-based botnet). iBotnet is a string of Macs infected with a backdoor Trojan, that gets into your system posing as an iWork ‘09 trial. This iBotnet Trojan spreads through the BitTorrent network, bundled inside a fake copy of the iWork09 trial, named iWork09.zip.

A rare Mac OSX Trojan, iBotnet’s Trojan works like other Windows Trojans: iBotnet starts up with your system, stays hidden in the background, and contacts hackers by connecting to various IP addresses.

Unless identity theft, hackers, and iBotnet popups sound like a fun weekend, I’ll show you how to remove iBotnet for free.

Do You Have iBotnet?

When you’re infected with badware — whether it’s iBotnet, spyware, adware, a Trojan, or a virus — there are a few key symptoms. Have you noticed…

• Slow computer performance: It just takes one parasite like iBotnet to slow your computer dramatically. If your Mac takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with iBotnet.
• New desktop shortcuts or switched homepage: Badware like iBotnet may change your Internet settings to redirect your homepage to another site.
• Annoying popups: Badware can bombard your computer with popup ads, even when you’re not online. Through these popups, you may be tricked into downloading more spyware.

How to Remove iBotnet Manually

Before we get started, you should backup your system, so it’ll be easy to restore your computer if anything goes wrong.

To remove iBotnet manually, you need to delete iBotnet files. Not sure how to delete iBotnet files? Click here, and I’ll show you. Otherwise, go ahead and…

Block iBotnet sites:

Get rid of iBotnet folders:

iBotnet modifies these files:

How Do I Remove iBotnet Files?

Need help figuring out how to delete iBotnet files? While there’s some risk involved, you’ll find it’s fairly easy to delete iBotnet files in Mac OSX.

1. Drag the iBotnet files and folders to the Trash (at the end of the Dock, or on your desktop). Any of iBotnet items you trash will stay there until you empty the Trash. So if you change your mind, you can always retrieve a file. Just click the Trash icon, and drag any items out.
2. Select Finder > Empty Trash. Even after you empty Trash, you can still recover deleted files. If you want to delete iBotnet files so they can’t be recovered, select Finder > Secure Empty Trash. When you delete iBotnet files like this, they become senseless data. If you’ve already deleted iBotnet files insecurely, open Disk Utility (found under Applications > Utilities). Choose Help > Disk Utility Help and search for how to erase free disk space.

Having trouble removing iBotnet files? They might be locked. Select the iBotnet file or folder, choose File > Get Info, and under General, uncheck Locked.

How Did You Get iBotnet?

Wondering how iBotnet ended up on your Mac? If you’re infected with iBotnet or other badware, perhaps you were using…

• Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like iBotnet. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
• Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like iBotnet.
• Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like iBotnet. I recommend you use Firefox web browser, if you don’t already.

Understanding iBotnet

If you’re infected with iBotnet, you should know what you’re fighting. I’ll explain some definitions related to iBotnet.

iBotnet May Be a Trojan

Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures). Most Trojans are able to gain complete control over your PC after installation. With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.

Infection Methods of iBotnet and Other Trojans

Most Trojans infect your computer by tricking you into launching an infected file. This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.

• Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. Many Trojans exploit security holes in Microsoft Outlook. You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.
• Websites: Your PC may be infected with a Trojan when you visit a rogue site. Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.
• Open ports: If your computer runs programs that provide file-sharing functions – such as AOL Instant Messenger (AIM), MSN Messenger, and more – you may open your computer up to vulnerabilities. Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.

iBotnet May Be a Backdoor

“Backdoor” describes a parasite that gets past your system’s normal means of authentication, remotely accesses your PC, or otherwise enters your system without being detected. Trojans and worms often use backdoor methods to access your computer and steal your personal and financial information and/or install more malware into your PC.