Possible Serious Security Threat To My MAC

Does anyone recognize what this is? It is coming from an IP address of 178.162.157.232, in Germany.

Do I follow the steps with it, or is this a trap?



Larger view here: http://aloeye.com/1Miscellaneous_Pictures/WHAT.png

Looks like a bogus pop up message to me. Probably to get you to buy some junk application that does nothing but cost you money and possibly to obtain your personal info like your credit card number, etc. I would cancel the message on the screen and avoid any future notifications.

Looks like it is just another version of mac defender. (They just want your money)

The link has instructions to get rid of it.

What I did was close the tab. Don't click on anything, just close the Tab. Nothing happened when I did except it was gone. Also make a note of what URL took you there and avoid it.

thurstmw said:

Looks like it is just another version of mac defender. (They just want your money)

The link has instructions to get rid of it.

Click to expand...

That's exactly what it is. Just close the window and delete the files that were downloaded.

BrianLachoreVPI said:

That's exactly what it is. Just close the window and delete the files that were downloaded.

Click to expand...

Excellent advice. If he is using Safari, also be sure in Preferences and General that Download SAFE files is Unchecked! If it is, nothing probably downloaded.

thurstmw said:

Looks like it is just another version of mac defender. (They just want your money)

The link has instructions to get rid of it.

Click to expand...

Done! Thank you!!!

dtravis7 said:

Excellent advice. If he is using Safari, also be sure in Preferences and General that Download SAFE files is Unchecked! If it is, nothing probably downloaded.

Click to expand...

It was checked, but not anymore - Thanks!

Hunh!?

This is the final report:

One or more infected files were found, but were left where they are. You can either deal with them yourself, or scan again with the preferences set to move them into a different folder.

Click to expand...

Well, I want them deleted, how do I "Deal with them myself"? What good does setting preferences to put them in a folder? I guess I am confused.

Any suggestions?

IF its on your Mac somewhere use Spotlight to find the file using the file name and then find the path to it and trash it . ... . .. .

V Rod said:

Hunh!?

This is the final report:



Well, I want them deleted, how do I "Deal with them myself"? What good does setting preferences to put them in a folder? I guess I am confused.

Any suggestions?

Click to expand...

Final report from what?

V Rod said:

Hunh!?

This is the final report:



Well, I want them deleted, how do I "Deal with them myself"? What good does setting preferences to put them in a folder? I guess I am confused.

Any suggestions?

Click to expand...

There are no infected files except this program.

Do this:

All you have to do is go into Safe Mode. Mac OS X: Starting up in Safe Mode
Then go into the Applications Folder > Choose MacDefender.app > Move to Trash. (in Safe Mode)
Reboot normally and reset Safari.

Replace "macdefender.app" with whatever this program is called.

BrianLachoreVPI said:

Final report from what?

Click to expand...

Just the programs final statement / summary.

There have been some reports that simply dragging the MacDefender application to the Trash doesn't necessarily get rid of it, especially with newer iterations.

You may want to download and run:

MacDefenderKiller (free, donation requested)
Kill The MacDefender Virus With “MacDefenderKiller”

V Rod said:

Just the programs final statement / summary.

Click to expand...

The point to realize is that 'program' is a fraud. It is malware - and it is designed to entice you to provide credit card information. Simply close it. Do not click on anything it prompts you to ...better yet - just hit cmd+q - then go to your apps folder - drag it to the trashcan - and look for any packages that were downloaded, starting with your downloads folder, and drag to the trash. Then empty the trash - and you'll be fine.


I haven't seen the 'reports' that Randy mentions but I don't doubt at all that variants are evolving. I'd be interested in any links to those reports though. I do know, from first hand experience, that the steps I described or provided to you in the earlier posted link will take care of the problem.

I am going to try a variant as soon as I can find one and will report back.