1 Reply Latest reply: May 24, 2011 3:55 PM by b noir
Edson.ajj Level 2 (270 points)

I have made an Automator workflow to remove all the known variants.

You can get it here: http://bit.ly/k5O8Ux


Alternatively you can follow the manual steps:

  1. Open Applications > Utilities > Activity Monitor and quit any processes linked to MACDefender.
  2. Delete MACDefender from the Applications folder.
  3. Check System Preferences > Accounts > Login Items for suspicious entries.
  4. Run a Spotlight search for "MACDefender" to check for any associated files that might still be lingering
  • Substitue "Defender" for "Security" or "Protect" depending on the variant you have.

MacBook 5.1 (unibody, late 2008), Mac OS X (10.6.3)