Here’s a fix for the trojan you may have picked up while dipping unprotected into murky pirate waters for a bootleg copy of Apple’s iWork ’09.
https://gizmodo.com/torrented-copies-of-iwork-09-come-laced-with-a-nasty-os-5137161
You can do it all manual-like, with the following Terminal incantations (But be careful! That’s some unprotected deleting going on there):
1) (open Terminal.app)
2) sudo su (enter password)
3) rm -r /System/Library/StartupItems/iWorkServices
4) rm /private/tmp/.iWorkServices
5) rm /usr/bin/iWorkServices
6) rm -r /Library/Receipts/iWorkServices.pkg
7) killall -9 iWorkServices
Or, the folks at MacScan have released a free utility that handles the cleanup by itself. Download it here. [Macrumors]
