Removal Guide: Fake Security Software on OSX
Posted: 2011-05-09 06:29:58 Expiration: 2011-06-15 06:29:58
Mac Defender and Mac Protector are fake rogue anti-spyware programs on OSX. This is a removal guide for these two programs.
From BleepingComputer.com:
Mac Defender/Protector is a fake rogue anti-spyware program for the Mac OSX operating system. The infection is spread through the use of advertisements on web sites that pretend to be fake online scanners. When Mac Defender/Protector is installed on your computer it will also be added to your accounts Login Items so that the program is launched every time you login to your Mac. As there is no Dock icon for this application, it is also not easily closed and will instead require you to terminate its process through the Activity Monitor before you are able to remove the application from your computer.
To remove:
- Close out of the Mac Defender/Protector window
- Go to the Utilities folder
- Open the Activities Monitor and quit the process Mac Defender/Protector note: quit the program, do not force quit
- Go to the Applications folder
- Control-click on the Mac Defender/Protector folder
- Select Move to Trash
- Go to System Preferences -> Accounts
- Go to Login Items
- Select Mac Defender/Protector and click the minus sign to remove it
For screenshots of this process and what the malware looks like, go to BleepingComputer.com
-- DoIT HD Ops Team: Brian Harris