Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Mac Defender

Mac Defender has appeared in my iMac (OS X 10.6.7)

I tried to remove it by dragging the program to the trash from the applications folder, but I cant because the program is open.

The program is pretending to be an antivirus program send $$, obviously a scam.

I re-started but I cat stop it from loading.


There is very little info on this program out there (MacDefender.app)


Any ideas?

iMac, Mac OS X (10.6.7)

Posted on Apr 30, 2011 8:41 AM

Reply
176 replies

Apr 30, 2011 10:35 AM in response to anne e

A manual delete is the way to go, unless a program comes with an uninstaller (oviously, not in this case.)


Best way to find all related files is to use EasyFind, and enter the name of the developer, company or anything else that might be related (google for that.) EF will only find what you tell it to search for, but it will catch everything if you enter the right search terms. Even if a program comes with an uninstaller, since it might not be written to catch everything, I still like to run EF on it afterward.


Set to "Scan all files," "Files and Folders," "Ignore case," "Invisible files." Sometimes, including Package contents is useful.


Some files will be able to be deleted from Destroy or Move to Trash, directly from EF. But if a file stays, open it in "Reveal in Finder" and delete it from there, using your password.


Only caveat in using EF is to be careful not to delete a file that might be shared by another process or application. Watch out, especially, when deleting from /System/Library.

Apr 30, 2011 3:05 PM in response to anne e

anne e wrote:


I tried to remove it by dragging the program to the trash from the applications folder, but I cant because the program is open.

Try starting up in Safe Mode to prevent the app from running. Delete the app. Check /System/Library/StartupItems/, /Library/StartupItems/, & System Preferences > Login Items for anything suspicious looking that might reinstall it. (The first two are normally empty so anything in them is a third party addition.)

Apr 30, 2011 3:21 PM in response to anne e

This is the only suggestion that worked for me. Good luck!


From WZZZ: "See if you can locate it in Activity Monitor in Utilities (it may be running under a different name, so post back if you don't see its real name.) Set to Active Processes and Force quit it from there. Then locate and delete all its ****** files ..."


I found it in All Processes, highlighted it, and clicked on a red stop sign QUIT icon.

Apr 30, 2011 3:26 PM in response to wrwoolley

wrwoolley wrote:

I found it in Activity Monitor and was able to delete it from there. Thanks VERY much!

Note that you can't delete anything from Activity Monitor. You can quit (or force quit) running processes, but that doesn't delete the app that spawned the process. If there is something installed that will restart it, say on starting up your Mac or logging into your user account, you will just have to quit it again every time you do that.

Apr 30, 2011 3:48 PM in response to wrwoolley

No, as RC-R pointed out, it's not cool. Next time you startup or log out and back in, it'll be back. You have to get rid of all its files. I only told you to force quit it because you were getting an "in use" message and it wasn't letting you trash its files. Force quitting is only a temporary solution.

Mac Defender

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.