“MACDefender” Malware Targets Mac OS X Users – Here’s How to Protect Against and Remove It

Geek · May 2, 2011

<p>A new malware threat has been identified for Mac users, the app is called MACDefender and it disguises itself as antivirus software for <a href="http://osxdaily.com/category/mac-os-x/">Mac OS X</a>. The malware attempts to install itself through hijacked websites, and the threat level is considered low, nonetheless all Mac users should be aware of the potential threat and take steps to avoid a potential problem. </p>

<h2 style="font-size:1.2em;">2 Simple Steps to Protect Against MACDefender</h2>

<p>There are two easy ways to avoid being affected by MACDefender:</p>

<p><strong>1) If you see the above “MACDefender Setup Installer” wizard at any point while browsing the web, do NOT click to install the application</strong></p>

<p><strong>2) Disable Automatic File Opening in Safari</strong>

If you use Safari as your default web browser, be sure to disable automatic opening of safe files after downloading:</p>

<ul>

<li>Open the Safari menu and pull down to Preferences (or just hit Command+, to launch them)</li>

<li>Look at the bottom of the General tab and uncheck the box next to “Open ‘safe’ files after downloading”</li>

</ul>

<p>If you’re concerned that a Mac has been infected by MACDefender, here is how to check for and remove the malware:</p>

<h2 style="font-size:1.2em;">Check for and Remove MACDefender Malware</h2>

<p>You can check to see if you have been infected with the MACDefender malware, and remove it, by doing three things:</p>

<ol>

<li>Launch the <a href="http://osxdaily.com/2010/08/15/mac-task-manager/">task manager tool Activity Monitor</a> (located in /Applications/Utilities/) and click to sort processes by ‘Name’ and look for MACDefender or MacDefender.app – if this process is running, select the process and then kill it.</li>

<li>Open System Preferences, click on Accounts, and select the “Login Items” tab, now look for MACDefender or any unusual entry in the list. If something is found, select it in and press the “-” button to delete it from the login item list.</li>

<li>Open your applications folder (/Applications/) and look for MACDefender or MacDefender and delete the application</li>

</ol>

<p>In the odd event that you have MACDefender and the above three steps did not remove the app, <a href="http://osxdaily.com/2010/02/17/track-down-all-startup-login-script-and-application-launches-in-mac-os-x/">follow this guide to track down all login and boot scripts and applications</a>, it may be hiding elsewhere although there are currently no reports of this.</p>

<p>If you’re curious, you can read more about MACDefender and how it masks itself as antivirus software at <a href="http://blog.intego.com/2011/05/02/intego-security-memo-macdefender-fake-antivirus/">Intego’s blog</a>, they discovered the malware and they also happen to make genuine antivirus software for Mac.</p>

</div>

</div><img src="http://feeds.feedburner.com/~r/osxdaily/~4/ibLUrHBQ7dw" height="1" width="1"/>

View the full article

miniklop · May 31, 2011

thanks, very good & interesting post! MacDefender use myself to months and now locking more powerful firewall

i heard about this firewall www.protemac.com/netmine/ a lot of positive comments, any body use and can tell more about it?

Sign In

“MACDefender” Malware Targets Mac OS X Users – Here’s How to Protect Against and Remove It

Recommended Posts

Geek

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

miniklop

Browse

Activity

Site Info