9 Replies Latest reply: May 14, 2011 8:22 AM by WZZZ
susan9941 Level 1 (0 points)

How can I get rid of an app that does not appear in the Finder.  It is called MacProtector and I foolishly accepted installation.  I cannot Trash it because it is open and I cannot quit it because it doesn't appear in the Force Quit window.


iMac, Mac OS X (10.6.7)
  • babowa Level 7 (29,930 points)

    If you do a search here, you will find the solutions available:

     

    https://discussions.apple.com/message/15150893#15150893

     

    https://discussions.apple.com/message/15150290#15150290

     

    They keep changing the name of it, but it appears to be the same stuff.

  • WZZZ Level 6 (12,845 points)

    First, restart in Safe Boot by holding the Shift key down at the chime. This will keep it from running, so you can remove it.

     

        1.    Drag the MacSecurity program -- or whatever it's called, MAC Defender, MacProtector (installed in the Applications folder by default) to the Trash. Empty the Trash.

        2.    Remove item of same name from the Login Items for your Account in the OS X System Preferences (if it exists).

        3.    Go to your Home folder Library>Preferences and Application Support (may not be one there) and search for any files with one of the above names and trash them. Empty the trash.

  • Michelle3973 Level 1 (0 points)

    1. Open up Finder.

    2. Go to Applications.

    3. Open up the folder that says Utilities.

    4. Click on Activity Monitor.

    5. Type in the Search Box,"MacProtector."

    6. Click on MacProtector.

    7. Hit "Quit Process" at the top.

    8. Restart your computer and everything should be back to normal.

     

    I hoped I helped!

  • babowa Level 7 (29,930 points)

    The best and most thorough instructions are found here:

     

    https://discussions.apple.com/thread/3043386

     

    There is more to it than just using Activity Monitor.

  • Michelle3973 Level 1 (0 points)

    Not to be rude or anything, but there's really not anymore than that.

    I definitely respect the fact that you've had a lot more experience than me, but I had MacProtector on my computer, I used those instructions, and MacProtector isn't on my computer anymore.

  • WZZZ Level 6 (12,845 points)

    Killing it in Activity Monitor is only temporary. The next time you restart or logout and back in, it will be back.

     

    First, restart in Safe Boot by holding the Shift key down at the chime. Or, alternatively, open Activity Monitor in Utilities, set to Active Processes, find the program and force quit it. This will keep it from running, so you can remove it.

     

        1.    Drag the MacSecurity program -- or whatever it's called, MAC Defender, MacProtector (installed in the Applications folder by default) to the Trash. Empty the Trash.

        2.    Remove item of same name from the Login Items for your Account in the OS X System Preferences (if it exists).

        3.    Go to your Home folder Library>Preferences and Application Support (may not be any there) and search for any files with one of the above names and trash them. Empty the trash.

        4.    If you use Safari, go to Preferences>General and UNCHECK "Open "safe" files after downloading. Keep that unchecked.

     

    If you paid for it, they have your credit card #. Call your credit card and dispute the charges. Also, cancel the card ASAP.

     

    As a precaution, change your password.

  • shai techie may Level 1 (0 points)

    I faced the same problem as my iMac also got infected by MacPRotector. thanks to all the answeres here, got some strength. 

     

    I also Tried to trash, force quit nothing worked.

     

    Finally I went to the folder where it was stored and one by one removed all the files, till it became useless.

     

    It did not allow me completely remove for some of the program from trash, but on my next reboot, I could do that.

     

    Gave me extreme scare as at some point some strange pages started falshing from Firefox. Now it looks fine.

     

    In case you know any good Mac approved tool to help me scan my system to see if there was any damamge, will be helpful.

     

    Thanks a lot for all the hints.

     

    Cheers!

  • rkaufmann87 Level 9 (55,218 points)

    CNET published an article yesterday that can help you guys out. Here is the link:

     

    Malware targeting OS X users

     

    and I found this little app that's specifically for removing this piece of malware.

     

    http://www.macupdate.com/app/mac/38520/macdefenderkiller

     

    Roger

  • WZZZ Level 6 (12,845 points)

    From the cnet article:

     

    And if you have installed one, such as VirusBarrier X6, Norton, Kaspersky, or Sophos, you should recognize it as the package you have installed.

     

    NORTON: Stay away from it like the plague; it will wreck a Mac. Topher is way off on this one.

     

    As for MacDefender Killer, I'm not sure it has been properly vetted, or if it will catch all files if any new versions of this Trojan appear. I wouldn't trust it on my computer. I'd scan with ClamXav, or do the manual removal:

     

    First, restart in Safe Boot by holding the Shift key down at the chime. Or, alternatively, open Activity Monitor in Utilities, set to Active Processes, find the program and force quit it. This will keep it from running, but only temporarily, so you can remove it.

     

        1.    Drag the MacSecurity program -- or whatever it's called; it keeps using different names -- MAC Defender, MacProtector, MacKeeper 911, Apple Security Center, Apple Web Security -- it's not hard to imagine the new names it will be using in the coming days -- (installed in the Applications folder by default) to the Trash. Empty the Trash.

        2.    Remove item of same name from the Login Items for your Account in the OS X System Preferences (if it exists).

        3.    Go to your Home folder Library>Preferences and, if you find it, delete com.alppe.spav.plist. Look also in Application Support (may not be anything there, but check just in case) and search for any files with one of the above names and trash them. Empty the trash.

        4.    If you use Safari, go to Preferences>General and UNCHECK "Open "safe" files after downloading. Keep that unchecked.

     

    If you paid for it, they have your credit card #. Call your credit card and dispute the charges. Also, cancel the card ASAP.

     

    As a precaution, change your password.