Post Mac Defender Issues!

I have just deleted Mac Defender from my desktop... But now my volume is not working in itunes or otherwise. What should I do?

See:
Trojan War
If you discover a trojan program is running on your computer then look to the following information for assistance:
1. A recent discussion on the Apple Support Communities: MacDefender Trojan.
2. An excellent site devoted to Mac Malware: Macintosh Virus Guide
3. Another site for removing MacDefende, et.al.: MAC Defender Rogue Anti-Virus analysis and Removal
Removing strange software can be a task. The following outlines various ways of uninstalling software:
Uninstalling Software: The Basics
Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash. Applications may create preference files that are stored in the /Home/Library/Preferences/ folder. Although they do nothing once you delete the associated application, they do take up some disk space. If you want you can look for them in the above location and delete them, too.
Some applications may install an uninstaller program that can be used to remove the application. In some cases the uninstaller may be part of the application's installer, and is invoked by clicking on a Customize button that will appear during the install process.
Some applications may install components in the /Home/Library/Applications Support/ folder. You can also check there to see if the application has created a folder. You can also delete the folder that's in the Applications Support folder. Again, they don't do anything but take up disk space once the application is trashed.
Some applications may install a Startup item or a Log In item. Startup items are usually installed in the /Library/StartupItems/ folder and less often in the /Home/Library/StartupItems/ folder. Log In Items are set in the Accounts preferences. Open System Preferences, click on the Accounts icon, then click on the LogIn Items tab. Locate the item in the list for the application you want to remove and click on the Delete [-] button to delete it from the list.
Some software use startup daemons or agents that are a new feature of the OS. Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/.
If an application installs any other files the best way to track them down is to do a Finder search using the application name or the developer name as the search term. Unfortunately Spotlight will not look in certain folders by default. You can modify Spotlight's behavior or use a third-party search utility, Easy Find, instead. Download Easy Find at VersionTracker or MacUpdate.
Some applications install a receipt in the /Library/Receipts/ folder. Usually with the same name as the program or the developer. The item generally has a ".pkg" extension. Be sure you also delete this item as some programs use it to determine if it's already installed.
There are many utilities that can uninstall applications. Note that you must have this software installed before you install software you may need to uninstall. Uninstallers won't work if you install them after the fact. Here is a selection:
AppZapper
Automaton
Hazel
CleanApp
Yank
SuperPop
Uninstaller
Spring Cleaning
Look for them and others at VersionTracker or MacUpdate.
For more information visit The XLab FAQs and read the FAQs on removing software and dealing with spyware and malware.
After removing all the components of the software you may have to restart the computer to fully disable the software. This will be the case when removing software that has installed a daemon. After the daemon has been removed you need to restart the computer to stop the daemon. Alternatively, you can kill the daemon process using the Terminal application or Activity Monitor.
Be sure you have removed it properly. As for the other issues you mentioned you will need to provide further explanation. "Not working in itunes or otherwise" is not very useful information. If these problems are unrelated to your post, then post them in a new topic.
Search the forums for this trojan as there have been thousands of posts already.

Similar Messages

I don't recall always having to enter admin. name and p/w when doing updates. Is this req't only for certain software. I am a bit paranoid now with the Mac Defender lurking about.

When completing the software updates I can't remember always having to enter administrator name and password. Maybe it's just been automatic on my part but now I rethink the process when I am asked to enter this info since the Mac Defender malware became an issue with Mac. Just wanted to know if this procedure occurs with all software updates or is it selective based on the type of update? This time is concerned Airport. Thanks for any insight.

Are you running as an Admin User or non-Admin? ie. have you set your Mac up with multiple user accounts - one as an Admin and one as a Standard user?
For security, you are better off having an Admin user account that has Admin privileges and a Standard user account that you use from day to day with standard privileges. When you install system updates you will be required to enter an Admin name and password, and any software that needs access to the system will require an Admin name and password, but anything that you install just for your user account that doesn't require total system access will be able to be dragged and dropped into your Application folder as per usual.
MacDefender runs in a web browser - that should be a huge red flag! If you see a warning when you are running Safari or another web browser close the browser window or Force Quit it. (under the Apple Menu => Force Quit...) In Safari Preferences untick Open "safe" files after downloading. (It will prevent an installer from automatically launching if something nasty is downloaded to your machine.) MacDefender and its variants attempt to trick people into installing stuff that will compromise their system. If something pops up unannounced on your machine that you didn't download, close it and delete it.
This article goes into depth about the MacDefender Malware:
http://rixstep.com/2/20110610,00.shtml
The salient points are summed up in the "Recapitulate" section at the bottom of the article: It's a bit Hipster Geeky.
"To Recapitulate
As recounted elsewhere, the Mac Defender attack is a well thought out attack that may have taken months to get together. The first step was to compromise websites of eejits, hack their FTP accounts, and upload dynamited files to their servers.
Then followed the Google whacks which led to people clicking on links they'd provided at the sites they'd hijacked.
And then finally they uploaded Mac Defender so people would get hit by it. And the purpose of Mac Defender is to scare you into thinking you're infected so you pull out your credit card.
Then the hackers run away with your credit card info and buy mink coats and chinchilla coats or whatever they want.
But staying clear of Mac Defender is really easy and doesn't require any AV software.
Don't ever open anything you didn't want to download.
Turn off JavaScript when accessing any Google Images site.
Make sure you don't have Safari set to automatically open downloads."
I'd add, keep your software up to date. Especially Adobe's Flash Plug-in as this is no longer supplied in system updates by Apple and could become an attack vector in the future. Always download software from reputable sources - ie. when downloading the Flash plug-in, get it from Adobe directly - don't follow a link from a website that tells you your version of Flash is out of date.
Enable your Firewall in System Preferences => Security => Firewall. Click on the Advanced button and Enable Stealth Mode too.
Also under:
System Preferences => Security => General.
Disable Automatic Login. Require a password to unlock each System Preferences pane. Use secure virtual memory. Automatically update safe downloads list.
Educate yourself.

Mac Defender Malware?

What is Mac Defender Malware? what does it really do? I Never heard of Mac Defender Malware & I Wanted to ask about it? cause i see the little yellow link about it & i'm ready to click it, i been seeing it for weeks now or something like it or whatever whatever? can i click the link to read about it? is it safe? sorry this is a stupid question

Recently discovered malicious software dubbed "MACDefender" (also goes under the name of MacProtector, MacGaurd, MacSecurity or MacShield) takes aim at users of the Mac OS X operating system by automatically downloading a file through JavaScript. But users must also agree to install the software, leaving the potential threat limited.
The new MACDefender malware was first noted on April 30, 2011 by users of the Apple Support Communities, and was highlighted on May 2 by antivirus company Intego. If the right settings are enabled in Apple's Safari browser, MACDefender can be downloaded to a system after a user clicks a link while searching the Internet.
"When a user clicks a link after performing a search on a search engine such as Google, this takes them to a web site whose page contains JavaScript that automatically downloads a file," Intego said. "In this case, the file downloaded is a compressed ZIP archive, which, if a specific option in a web browser is checked (Open 'safe' files after downloading in Safari, for example), will open."
More details here:
http://www.reedcorner.net/news.php/?p=138#more-138
However, users must still agree to install the malware after it downloads. After the ZIP file is extracted, users are presented with the "MACDefender Setup Installer," at which point they must agree to continue and provide an administrator password.
Because of the fact that users must agree to install the software and provide a password, Intego categorized the threat with MACDefender as "low."
Users on Apple's support forums advise killing active processes from the application using the Mac OS X Activity Monitor. MACDefender can then be deleted from the Applications folder by dragging it into the trash. There is also a 'MacDefenderKiller' uninstaller available here:
http://www.macupdate.com/app/mac/38520/macdefenderkiller
On May 24 Apple issued this Knowledge Base Article on how to avoid or remove the MacDefender malware (which has been updated several times):
http://support.apple.com/kb/HT4650
But that does not mean it is over. On May 25, MacGuard is launched:
http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous- version/3385?tag=nl.e589
Further information here:
http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3282245
Apple released Security Update 2011-003 on May 31, 2011, which adds malware detection and removal for the "MAC Defender" scam and delivers a daily update mechanism for updating subsequent malware definitions. This is for Snow Leopard only.
The security update for Mac OS X 10.6.7 is available from Software Update or the company's Downloads page. Installing the update does not require a system reboot.
http://support.apple.com/kb/DL1387
(The malware is not to be confused with MacDefender, the maker of geocaching software including GCStatistic and DTmatrix. The company noted on its site it is not affiliated with the malware.)
Trojans and other malware spreads through search engines like Google via a method known as "SEO poisoning." The sites are designed to game search engine algorithms and show up when users search for certain topics.
Now also available on Facebook!
http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3283550
Apple are now fighting a running battle with the scareware makers:
http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3284106

How to remove Mac defender

How do I get rid of the Mac Defender?

I have installed it on many Macs and have not had any users report kernel panics or slowdowns because of it.
"Any Mac on which those trojans is installed is being horrendously misused, and Sophos doesn't change that."
Do you personally know the users of these Macs? Again, even intelligent people can get trojans or malware on their computer. Get off of your high horse.
"True, and just as on Windows, a more sophisticated trojan will disable "anti-virus" software."
That is true, but antivirus is still a necessity both in the Mac and PC world. Funny, because other than the OS, a Mac is a PC. I know I am getting off-topic myself, but this begs the question, "Why can't I legally run Mac OS on my PC?" Most current Intel PCs share the same architecture and you can run Windows on a Mac. So why not Mac OS on a PC? Because Apple's hardware sales would tank. Who would buy a $2500 MacBook Pro when they can buy a $1000 PC notebook with the same specifications and load Mac OS on it? Microsoft is taking direct aim at Apple with their current campaign, directly comparing Macs to PCs and how much less a PC with Windows 7 costs.
http://windows.microsoft.com/en-CA/windows7/products/compare/pc-vs-mac/do-the-ma th
I am not biased toward either company but I really agree with this. PC notebooks cost a LOT less than Macs and have the same or more functionality. Plus, Windows 7 is an extremely stable and user friendly OS, much like Mac OS is. That brings me to the old Mac vs. PC ads that Apple used to come out with, although funny, were very misleading. The one ad described Apple computers never getting cryptic error messages, hmmm, kernel panics anyone? They are the equivalent to a BSOD. Also, the major complaint I get from people when their Macs break down is that they were under the assumption that Macs never break, they're so much more reliable than a PC. That is a common misconception nowadays as well. Macs used to be rock solid in the pre-Intel days. But nowadays, in my experience, for every 1 PC hardware issue I see, I see at least 5 Mac hardware issues. PCs don't have nearly as many hardware issues as they used to. Apple seems to be putting form over function with their line-up, which result in hardware failures (MacBook Air hinges cracking, Time Capsule hard drives overheating and failing, MacBook top case palm rests cracking, iMacs overheating and failing, etc).

Mac Defender virus?

I got a virus on my computer and it downloaded something called mac defender. Now I can't get it off. It makes sexually explicit pictures and websites pop up on my computer. Anyone know how to get rid of this virus? Any help would be greatly appreciated.

EasyOSX wrote:
My source is Cult of Mac: http://www.cultofmac.com/mac-defender-variant-bypassed-os-x-anti-malware-softwar e-within-hours/97956. And they got their information from ZDNet: http://www.zdnet.com/blog/bott/new-apple-antivirus-signatures-bypassed-within-ho urs-by-malware-authors-update/3396
OK, well that was over two weeks ago and it wasn't immune to the defs update that came out that same day shortly after 9pm GMT. There have been a total of 16 updates since then and as near as I can tell Apple has been able to keep up. Certainly agree that there are issues for a few folks in getting the updates and the frequency of updates seems to exceed what Apple expected, but as many have said here before, the solution to this one is an educated user. I'm not against supplementing that with reliable AV (or AM for the purists) software to protect against the next threat, which could be more damaging.

I've read others' posts on this issue and still need an answer that works. Safari keeps dropping wireless; no issues on a Dell laptop with XP in same room. Cleared cache, etc. - any other ideas?

I've read others' posts on this issue and still don't have an answer that works! Safari keeps dropping wireless connection every 5 - 10 minutes (it's gotten progressively worse over the last month). My husband, sitting 10 ft across from me, has no issues on a Dell laptop with XP so doesn't appear to be the router or ISP. Safari v5.0.6 Mac OS 10.5.8. Cleared cache, tried kill commands in Terminal, restarts, etc. Only restarting seems to keep it at bay for a period, but then it will start again. Any other ideas?

You posted a question about a problem connecting a Mac to a wireless router. You have an old Dell laptop that works well with that router.
I pointed you to a brief discussion with another poster who had a problem connecting a Mac to a wireless router. He had an old Dell laptop that worked well with that router. I suggested he upgrade the router firmware. He upgraded it, and the problem was solved. Another poster in that thread did the same thing, and his problem was also solved. Within the last day or two, I made the same suggestion to a third poster in another thread, and his problem was solved too.
Conclusion: Upgrading the router firmware helps sometimes.
If I understand your response, you think that checking for a firmware update isn't even worth a try. Am I missing something?

How to remove MAC Defender Rogue Anti-Virus?

How to remove MAC Defender Rogue Anti-Virus?

Lois, there are other messages threads posted here with details on the removal of MACDefender and MACSecurity. Search on them for a listing of relevant threads.
Here’s a Macworld article on how to prevent after you have removed it:
http://www.macworld.com/article/159595/2011/05/macdefender_trojan_horse.html
To remove, launch Activity Monitor and look for MACDefender. Quit it and any connected processes. Using Spotlight, search for MACDefender and remove everything found. Take the preventative steps in the article above.

Mac Printer Issues

My Mac OSX 10.8.5 used to be able to print to HP Office Jet Pro 8600 using Bonjour and airprint, but has stopped doing this - I have uninstalled the printer and downloaded the latest driver and managed to set up the fax facility but when trying to set up the printer - I get the following message - Unable to communicate with the printer at this time if I use airprint or if I select the software for the 8600 I get. Can't install the software for the HP Officejet Pro 8600 because it is not currently available from the Software Update server. What am I doing wrong? All help greatfully received

Welcome to the forums Karen!
I am hoping to help you with the installation issue you are having with your OJ 8600 and 10.8.
Please follow these steps:
Mac OS X: How to reset the printing system
Restart the computer
Re-add the HP driver (P Officejet Pro Full Feature Software and Driver - Mac OS X 10.6, OS X 10.7, OS X 10.8)
Let me know the results!
Happy Monday
R a i n b o w 7000I work on behalf of HP
Click the “Kudos Thumbs Up" at the bottom of this post to say
“Thanks” for helping!
Click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution!

MAC address issue----Spearman

Saw your comments on this in the post about the 1.9 bios for neo2platty ....
I can confirm that My MAC address issue was caused by the bios that you sited in your comments....all F's were written to My nvidia lan too...
only solution from what I have read is too rma it...'bummer'
just thought You would like to know.... Your not alone

I had the same problem yesterday and after many hours searching the web I ended up with this post that made me really desperate... But I didn't give up and while trying a new bios flash because of random crashes when in the bios, I noticed the obvious: you can change the MAC address when flashing
use the last version of the dos flasher with the parameters /nvmac:xxxxxxxxxxxx/wb after the name of the bios file; it's explained if you ask the help with the /help parameter. You can find the mac address on a stick on the parallel port.

COX Email & Mac Mail Issues!!!

+I have read some solutions on other posts regarding compatibility issues with Cox & email. For whatever reason, these solutions aren't working for me.+ Calling Cox has been a complete waste of time!!!!
_Here's my problem_: I can only get my email on the Cox server and to my iPhone, but not to Mail on my Mac. One caveat: I can send/receive a message to myself from Mail & the server...!!??? (but not from anyone else)
_Here are my POP Settings_:
* pop.west.cox.net (from another user, I alternated between "pop" to "spop" - it doesn't seem to make a difference?)
* smtp.west.cox.net
* Port: 110 (SSL box NOT checked)
I deleted the Cox keychain certificate because it was expired. Not sure if this was a good idea or not - just following another users advice.
I also used the Mail Connection Doctor - all green!
+**I really hope that someone can tell me what I'm doing wrong!+
+Thanks so much!+

_Here's my problem_: I can only get my email on the Cox server and to my iPhone, but not to Mail on my Mac. One caveat: I can send/receive a message to myself from Mail & the server...!!??? (but not from anyone else)
Sorry, but none of that makes any sense to me. What do you mean by 'the Cox server?' Do you mean webmail?
You can send an email to yourself--is that to your cox email from your cox email?
_Here are my POP Settings_:
* pop.west.cox.net (from another user, I alternated between "pop" to "spop" - it doesn't seem to make a difference?)
* smtp.west.cox.net
* Port: 110 (SSL box NOT checked)
To use spop you need to check the ssl box.
You should have the part before the @ in you email address as the User Name.
On the Advanced tab, you should have Password selected for Authentication.
Edit the smtp server list--the option is in the server popup list.
Set it for Password authentication and use the same username and password as for the incoming mail server.
You're not supposed to need that, but give it a shot.

Should i purchases the mac defender software

I was on a webpage and then I was prompted to protect my computer and consequently downloaded Mac defender. Now I'm being asked to pay for a subscription. Is it worth it? I thought Macs didn't have many problems with viruses.

No!
What webpage were you on?
Please post. With Warning! Maliciious!
and post it like this for example:
malicioussite DOT net
So it's not a link.
What browser were you using?
Thanks!

Issue while posting using goods issue for delivery type NL

Hello Experts,
I have created an outbound delivery for an intra-company transfer (within same company code) between two plants. The delivery type in NL (replinishment delivery)
When i am trying to post the goods issue from supplying plant, I am getting following error
"Account type K is not defined for document type WL".
Delivery type NL should not be used to issue stock to vendor but I am not issuing it to any external vendor , issuing the stokc only to a receiving plant.
Please help to understand why i am getting this error.
Regards,
Nish.

Hi,
If you are doing an STO Scenario, Check whether you have created the supplying plant as a vendor.
The Vendor Account group should be plants.
Also check whether you have given the plant in the vendor master Purchasing Data - Extras tab in the menu click on add purchasing data & check.
If you haven't assigned this, do the same & create a fresh STO & check.
Hope it will work.
Thanks & Regards,

Posting multiple goods issues against the same delivery

Hello gurus,
We are a fashion apparel company using ECC 6.0 and would like to know if it is possible to post mutliple goods issues against the same delivery?
I will explain the business requirement.
- We create a stock transport order to deliver 400 units of merchandise to on or our retail stores (STO is created and processed to a delivery).
- This information is passed down to our warehouse management system (which is not SAP)
- Our warehouse management system has the ability to split a delivery into multiple shipment when needed. For example, our warehouse may only be able to complete 250 units for our morning shipment and will therefore pick, pack and post this. This will feed back into SAP and process a 641 movement so that the units now show as "in transit". This is needed so that our stores can process the ASN and move the units into their inventory when they receive the merchandise later that day.
- During the afternoon, our warehouse will process the remaining 150 units and will ship this to our store later in the evening or next day.
Currently, we are not able to process another goods issue against a delivery as we close out the delivery during the first goods issue. We would prefer not to have to generate a new delivery for our DC and let them continue to process against the same delivery, but we are unsure how to configure this.
Any help or guideance would be extremely appreciated
Thanks in advance

Hi RJ,
First of all sorry to write such a lengthy reply,In one line if i want to summerize then it is not possible with standard SAP however we can achieve this by writing some piece of code in both the system
AS - IS
               Business process
          From business process point of view you are right that once the pick & pack is in process it is not advisable to create a new delivery document for balance quantity and share the same with WMS as then they have to create a new document in WMS and start picking based on that rather then the old delivery document number. if i am in your position then i can give a thought like this
e.g.
Delivery                                                  - 100 Unit
Shipment confirmation from WMS            -   60 Unit
Change in delievry quanity / Pick qty        -   60 Unit
Invoice from SAP                                    -   60 Unit
Second confirmation from WMS                          -   40 Unit
Change in the existing delivery quantity                -   Now here we have two option either
1) Change the delivery quantity / Pick qty to (60+40) =100 or
2) Remove the 60 and update 40 as delivery and pick quantity
Pros & Cons
if you will select option 1 then furhter invoice will happen for 100 unit which is incorrect as physically you are shipping only 40 unit
if you are selecting option 2 then the document flow is incorrect as you don't have history(in SAP) for the 60 unit which was shipped earlier
Solution ::
so in my opinion the best option is to create a seperate delivery document (store the old delviery number in one of the field of the new delivery and pass the same to custom segment of the IDoc) transmit the IDoc to WMS write the validation logic in WMS
Find the record with old deliver number in the WMS system, check the status whether it is active or inactive
if it is acitive Validate the Material + qty with the WMS record(Material + balance quantity) if both are same then pass the new deliery number to custom field of the WMS table
At the time of confirming back to the SAP, Write a piece of code in SAP that if the incoming idoc custom field(new delivery number) field is populated then ignore the orignal document number and post the document using the new delivery document number
Hope this help

BAPI to post a Goods issue with relation to Sales Order?

Hi Everyone,
After creating a delivery order, I need a BAPI to automatically post a goods issue for this DO.
I tried using BAPI_GOODSMVT_CREATE but it returns the message 'Goods Movement not possible with mvmt type 601'.
Any advice?
Best Regards,
Junwen

Hi John,
My data are as follows:
GOODSMVT HEADER:
PSTNG_DATE: 30.09.2004
DOC_DATE: 30.09.2004
REF_DOC_NO: had tried 1014000359 or empty
GOODSMVT_CODE: 03
GOODSMVT_ITEM:
MATERIAL: HP0121002
PLAN: 1010
STGE: 10FG
BATCH: BATCH1
MOV: 601
CUSTOMER: 180017
ENTRY_QNT: 1
ENT_UOM: PC
ENT_UOM_ISO: PC
DELIV_NUMB: 1014000359
DELIV_ITEM: 000001
From your feedback, it is possible to use the BAPI to create a goods issue for movement type 601?
Best Regards,
Junwen

Post a good issue against an outbound delivery with movement type 601 K

Hello,
according to my business scenario I need to manage the stock of different vendors into the client's location (plant) at storage location level and I need to post the good issue against an outbound delivery to decrease the stock level.
Since the owner of the goods isn't my client the item is managed only at quantity level (not value) so I'm not interesed in the accounting document.
To do it I'm using the functionality related to the vendor consignment stock but I'm not able to post the good issue against an outbound delivery using the movemement type 601 and the special stock indicator equal to K.
In particular I've tried in two different ways:
- setup the consignment stock indicator (= K) into the sales item category, but when I post the goods issue the system is not able to find out the right vendor
- to create a stock determination rule instead of the setting previous described, but the system display an error message (Fld selectn for mvmt type 601 / acct L534200770 differs for Cost center (010) ) even if the accouting is not relevant in my scenario
Can you suggest me how the system has to be setup in order to cover my requirements?
Thanks in advance,
Alessandro

Hi,
Please clarrify which material type you are using in this scenario? I suggest you to use material type UNBW (no value updation will be there) and create a material master. Use special stock indicator K. Proceed with 601K to do GI. Hope it works. Thanking you.

Post Mac Defender Issues!

Similar Messages

Maybe you are looking for