Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Mac Defender victim

I have the Mac Defender virus, got it late last night on an image search. I trashed as much as I could, but unpleasant unwanted sites keeps popping up,on Firefox. HELP!

MacBook Pro, Mac OS X (10.6.7)

Posted on May 3, 2011 9:10 AM

Reply
Question marked as Best reply

Posted on May 3, 2011 12:36 PM

Too young


MacDefender is not a virus per say, there are no viruses for MacOSX. It is a type of malware. If MacDefender is running, and you wil probably see an icon for ir in your menubar. Try this go to your actiivity monitor and look for the MAcDefender process, double click on it and force quit the application. Go to your applications folder and drag MacDefender to the trash. Also go to system preferences, go to accounts, go to login items. If MacDefender is there highlight and click the minus sign to remove it. Then open finder and type in a serch for Macdefender remove anything related to MacDefender. You can also search Spotlight. Type MacDefender in the Spotlight search box. Remove anything wiht MacDefender. Then restart your computer and empty the trash. This should remove everything related to MacDefender. Hope this helps.


Joseph

19 replies
Question marked as Best reply

May 3, 2011 12:36 PM in response to tooyoungtoretire

Too young


MacDefender is not a virus per say, there are no viruses for MacOSX. It is a type of malware. If MacDefender is running, and you wil probably see an icon for ir in your menubar. Try this go to your actiivity monitor and look for the MAcDefender process, double click on it and force quit the application. Go to your applications folder and drag MacDefender to the trash. Also go to system preferences, go to accounts, go to login items. If MacDefender is there highlight and click the minus sign to remove it. Then open finder and type in a serch for Macdefender remove anything related to MacDefender. You can also search Spotlight. Type MacDefender in the Spotlight search box. Remove anything wiht MacDefender. Then restart your computer and empty the trash. This should remove everything related to MacDefender. Hope this helps.


Joseph

May 3, 2011 6:16 PM in response to kirstyfromsydney

Kirsty



Do you have your installation disk? If so boot from the install disk. Insert the disk and power off the computer. Power up the computer while holding down the C key when you see the Apple logo and the spinning gear release the C key. Just before the install sequence you will see the menubar, you should see utilities, from the choose disk utility, choose your target disk, verify and repair your disk, then verify and repair permissions. After that quit disk utility. Then quit the installer, be sure to choose your 10.6.7 disk as the start up disk. restart the computer and hold down the eject key and let the computer boot up. Hope this helps.


Joseph

May 3, 2011 7:28 PM in response to MacJoseph

Thanks for all the help. I found a similar thread late last night recommending just what you described. I thought I'd cleaned everything out, but this morning I got the same yucky sites showing up. Someone suggested "opening in safe mode" which I did, andI found & trashed the remaining icon on my dock. I think I'm all clear. Thanks.

May 14, 2011 10:50 AM in response to tooyoungtoretire

Hello,


First understand that Mac Defender/Security/Protector/whatever is not a virus. At best it Malware and not very good malware at that. Second, Macs don't get viruses, so don't click on any virus warnings when on the internet.


The removal instructions are easy, but there are several steps:


-have user quit all apps

-have user force quit safari or any other apps that are still running

-have user open activity monitor and force quit mac defender/Security/Protector

-have user quit activity monitor

-have user delete mac defender/Security/Protector from downloads & applications folder

-have user do a Spotlight search for 'MacDefender/Security/Protector'/'Mac Defender/Security/Protector'

-have user go to system prefs>accounts>login items> and delete mac defender/Security/Protector from start up list

-have user restart

-have user empty trash


This has worked for everyone i know who has gotten this.


SpamCather

May 14, 2011 11:43 AM in response to kirstyfromsydney

kirstyfromsydney wrote:


Hi Joseph,


I completely re-installed the OX software from the Installation Disk. Now everything is working fine...
I noticed however that some people are talking about a safari setting re: allow files to automatically open..
How do I get this setting!!


Thank you soooo much Joseph!!!


That's what I advise, it's rather painless process and ensures all traces of the malware, including new bits, are removed out of OS X itself.


To prevent infection, keep in mind it needs JavaScript running in the browser. Sure turning off JavaScript in Safari can prevent the process, but it's a hassle as the web doesn't work right sometimes and the Safari preferences are a chore to access.


Another way is to use Firefox and the NoScript Add-on, drag a NoScript button to the toolbar to click on when you want all scripts and plug-ins to run on a per site, per use basis.

May 15, 2011 2:01 PM in response to tooyoungtoretire

Hi Guys,


I became one more victim of MAC Protector, but the mistake i did was even severe than all of you guys, I registered with MAC Protector, with my credit card details and everything and now I dont know how to get my money back or rather I should say where to get my money back. I would really appreciate if someone can guide me with this regard.


Thanks,

Nisarg

Mac Defender victim

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.