Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: Mac Defender victim

I have the Mac Defender virus, got it late last night on an image search. I trashed as much as I could, but unpleasant unwanted sites keeps popping up,on Firefox. HELP!

MacBook Pro, Mac OS X (10.6.7)

Posted on

Reply
Question marked as Helpful

May 3, 2011 12:36 PM in response to tooyoungtoretire In response to tooyoungtoretire

Too young


MacDefender is not a virus per say, there are no viruses for MacOSX. It is a type of malware. If MacDefender is running, and you wil probably see an icon for ir in your menubar. Try this go to your actiivity monitor and look for the MAcDefender process, double click on it and force quit the application. Go to your applications folder and drag MacDefender to the trash. Also go to system preferences, go to accounts, go to login items. If MacDefender is there highlight and click the minus sign to remove it. Then open finder and type in a serch for Macdefender remove anything related to MacDefender. You can also search Spotlight. Type MacDefender in the Spotlight search box. Remove anything wiht MacDefender. Then restart your computer and empty the trash. This should remove everything related to MacDefender. Hope this helps.


Joseph

There’s more to the conversation

Read all replies

Page content loaded

Question marked as Helpful

May 3, 2011 12:36 PM in response to tooyoungtoretire In response to tooyoungtoretire

Too young


MacDefender is not a virus per say, there are no viruses for MacOSX. It is a type of malware. If MacDefender is running, and you wil probably see an icon for ir in your menubar. Try this go to your actiivity monitor and look for the MAcDefender process, double click on it and force quit the application. Go to your applications folder and drag MacDefender to the trash. Also go to system preferences, go to accounts, go to login items. If MacDefender is there highlight and click the minus sign to remove it. Then open finder and type in a serch for Macdefender remove anything related to MacDefender. You can also search Spotlight. Type MacDefender in the Spotlight search box. Remove anything wiht MacDefender. Then restart your computer and empty the trash. This should remove everything related to MacDefender. Hope this helps.


Joseph

May 3, 2011 12:36 PM

Reply Helpful (1)

May 3, 2011 6:16 PM in response to kirstyfromsydney In response to kirstyfromsydney

Kirsty



Do you have your installation disk? If so boot from the install disk. Insert the disk and power off the computer. Power up the computer while holding down the C key when you see the Apple logo and the spinning gear release the C key. Just before the install sequence you will see the menubar, you should see utilities, from the choose disk utility, choose your target disk, verify and repair your disk, then verify and repair permissions. After that quit disk utility. Then quit the installer, be sure to choose your 10.6.7 disk as the start up disk. restart the computer and hold down the eject key and let the computer boot up. Hope this helps.


Joseph

May 3, 2011 6:16 PM

Reply Helpful

May 3, 2011 6:56 PM in response to kirstyfromsydney In response to kirstyfromsydney

Kirsty


I really don't know why your computer won't start. The other people who followed all the threads about MacDefender and how to get it off their computers had no problem. So I hope what I have suggested will get your computer in running order. Please post back so we can see if you're back up and running.


Joseph

May 3, 2011 6:56 PM

Reply Helpful

May 3, 2011 7:28 PM in response to MacJoseph In response to MacJoseph

Thanks for all the help. I found a similar thread late last night recommending just what you described. I thought I'd cleaned everything out, but this morning I got the same yucky sites showing up. Someone suggested "opening in safe mode" which I did, andI found & trashed the remaining icon on my dock. I think I'm all clear. Thanks.

May 3, 2011 7:28 PM

Reply Helpful

May 4, 2011 4:05 AM in response to MacJoseph In response to MacJoseph

Hi Joseph,


I completely re-installed the OX software from the Installation Disk. Now everything is working fine...
I noticed however that some people are talking about a safari setting re: allow files to automatically open..
How do I get this setting!!


Thank you soooo much Joseph!!!

May 4, 2011 4:05 AM

Reply Helpful

May 14, 2011 10:50 AM in response to tooyoungtoretire In response to tooyoungtoretire

Hello,


First understand that Mac Defender/Security/Protector/whatever is not a virus. At best it Malware and not very good malware at that. Second, Macs don't get viruses, so don't click on any virus warnings when on the internet.


The removal instructions are easy, but there are several steps:


-have user quit all apps

-have user force quit safari or any other apps that are still running

-have user open activity monitor and force quit mac defender/Security/Protector

-have user quit activity monitor

-have user delete mac defender/Security/Protector from downloads & applications folder

-have user do a Spotlight search for 'MacDefender/Security/Protector'/'Mac Defender/Security/Protector'

-have user go to system prefs>accounts>login items> and delete mac defender/Security/Protector from start up list

-have user restart

-have user empty trash


This has worked for everyone i know who has gotten this.


SpamCather

May 14, 2011 10:50 AM

Reply Helpful

May 14, 2011 11:43 AM in response to kirstyfromsydney In response to kirstyfromsydney

kirstyfromsydney wrote:


Hi Joseph,


I completely re-installed the OX software from the Installation Disk. Now everything is working fine...
I noticed however that some people are talking about a safari setting re: allow files to automatically open..
How do I get this setting!!


Thank you soooo much Joseph!!!


That's what I advise, it's rather painless process and ensures all traces of the malware, including new bits, are removed out of OS X itself.


To prevent infection, keep in mind it needs JavaScript running in the browser. Sure turning off JavaScript in Safari can prevent the process, but it's a hassle as the web doesn't work right sometimes and the Safari preferences are a chore to access.


Another way is to use Firefox and the NoScript Add-on, drag a NoScript button to the toolbar to click on when you want all scripts and plug-ins to run on a per site, per use basis.

May 14, 2011 11:43 AM

Reply Helpful

May 15, 2011 2:01 PM in response to tooyoungtoretire In response to tooyoungtoretire

Hi Guys,


I became one more victim of MAC Protector, but the mistake i did was even severe than all of you guys, I registered with MAC Protector, with my credit card details and everything and now I dont know how to get my money back or rather I should say where to get my money back. I would really appreciate if someone can guide me with this regard.


Thanks,

Nisarg

May 15, 2011 2:01 PM

Reply Helpful

May 16, 2011 9:19 PM in response to suzanne3t In response to suzanne3t

And be sure to ask that the charge be reversed. There is a number you can call and she will take your information and promise to refund your money, but that's just to prevent you from challenging the charge with the CC company until they have your money.

May 16, 2011 9:19 PM

Reply Helpful
User profile for user: tooyoungtoretire

Question: Mac Defender victim