Intego published an alert about a Trojan found in pirate copies of iWork 09 and currently distributed on P2P network. The Trojan entitled "OSX.Trojan.iServices.A" is installed and activated during iWork installation procedure and located in /System/Library/StartupItems/iWorkServices/"
This Trojan is designed to launch massive attacks on servers by sending an overload of requests.
Securemac is already offering a free tool to remove the Trojan and can be downloaded at the following address: iWorkServicesTrojanRemovalTool.dmg.
You can also perform the same function by following this procedure:
1) Open the terminal
2) sudo su admin password
3) killall -9 iWorkServices
4) rm -r /System/Library/StartupItems/iWorkServices
5) rm /private
