virus - mac defender?

Discussion in 'macOS' started by puckhead193, May 29, 2011.

  1. puckhead193 macrumors G3

    puckhead193

    Joined:
    May 25, 2004
    Location:
    NY
    #1
    I go downstairs on my imac and my screen is fluttered with porn. And on my menu bar is this thing. I don't have anti virus on my computer. I looked at activity monitor all I see is this MacGuard. Is this part of the mac-defender.
     
  2. celticpride678

    Joined:
    Feb 15, 2009
    Location:
    Boston, MA
    #2
    Appears so. It's the new variant of MacDefender that doesn't require an admin password to install.
     
  3. ezramoore macrumors 6502a

    Joined:
    Mar 20, 2006
    Location:
    Washington State
    #3
    1. Open 'Activity Monitor' found in your Applications/Utilities folder.
    2. Find 'MacDefender' or 'MacProtector' or somethign similar in the process list.
    3. Force Quit that process.
    4. Go to your Applications folder in Finder, locate MacDefendor/Protector.
    5. Move it to the trash, empty the trash.
    6. Go to System Preferences > Accounts > Login Items.
    7. Click the Mac Defendor/Protector item, then click the little minus sign at the bottom.
    8. Open Safari > Preferences > General and uncheck the box that says 'Open "Safe" items downloaded in Safari. This is located at the very bottom.
    9. Quit everything, reboot for good measure.
     
  4. puckhead193 thread starter macrumors G3

    puckhead193

    Joined:
    May 25, 2004
    Location:
    NY
    #4
    thanks.. my parents want me to take it to apple... for them to do nothing about it. Might do a re-install of OS X just to be safe.

    what does this virus do?
     
  5. ezramoore macrumors 6502a

    Joined:
    Mar 20, 2006
    Location:
    Washington State
    #5
    Its not technically a virus, its more a scam than anything. If you poked around you would see that it wants you to pay to 'disinfect yourself.' You would be giving your credit card number to scammers somewhere. It doesn't do anything harmful to your computer. Don't waste your time reloading it, it is quite unnecessary.

    If you need to reassure yourself (or your parents) download the free Sophos antivirus (http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-edition.aspx).
     
  6. puckhead193 thread starter macrumors G3

    puckhead193

    Joined:
    May 25, 2004
    Location:
    NY
    #6
    yawn and here i'm thinking its something bad where out credit card info was stolen etc.
    well that's good news!

    Thanks i can now breath!! :p
     
  7. John T macrumors 68020

    John T

    Joined:
    Mar 18, 2006
    Location:
    UK.
    #8
  8. stridemat Moderator

    stridemat

    Staff Member

    Joined:
    Apr 2, 2008
    Location:
    UK
    #9
    If you use Safari, to stop this happening again, de-select the open safe files automatically option with the Safari preferences (or equivalent in the browser you use).
     
  9. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #10
    Sophos is not recommended, as it can actually increase your Mac's vulnerability. No viruses exist in the wild that can run on Mac OS X, and there never have been any, since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some basic education, common sense and care in what software you install:
    The first section of that link deals specifically with the MacDefender/MacSecurity/MacProtector/MacGuard issue, which is not a virus.
     
  10. ezramoore macrumors 6502a

    Joined:
    Mar 20, 2006
    Location:
    Washington State
    #11
    I will clarify: If you are concerned that you are sharing viruses (especially with Windows machines) Sophos is a fine option, as long as it is uninstalled after you are done with your scan.

    While it is true that the engine runs as a superuser, and that an exploit could be (but hasn't yet) been written to take advantage of that with Sophos, it does to an excellent job of finding and removing malware that is lying dormant.
     
  11. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #12
    You can do the same thing with ClamXav, without the increased vulnerability, and without the need to uninstall. However, Windows users should be running their own antivirus, to protect against malware from all sources, not just from your Mac.
     

Share This Page