Hi Shel, The below is from: http://thenextweb.com/apple/2011/05/02/bogus-macdefender-malware-campaign-targets-mac-users-using-google-images/ Best, Kimo Luckily, disabling and removing the bogus MacDefender application is easy. (You could also apply these directions to MacProtector.) If you have been infected and want to make sure it no longer resides on your system, follow the steps below: To ensure you do not automatically download the app, uncheck the following: Safari > Preferences > General > uncheck “Open “safe” files after downloading”. Searching for the application and deleting it directly may fail, saying the app is in use. To stop it running, check Activity Monitor (in Applications > Utilities) and disable anything that relates to MacDefender. Look in /Library/StartupItems and, same place, LaunchAgents and LaunchDaemons for references to the malware app. Once quit, head to the Applications folder and drag the MacDefender app to the trash, then delete trash. To ensure all references to the app are cleared, run a search using Spotlight and delete all MacDefender references you find. AZURELINK :: "Simply Connected!" ------------------------------------------------------------------------------- Web Site Design & Scalable, Managed Web Hosting Joomla! Content Management System Implementation eCommerce Development ------------------------------------------------------------------------------- 321 Main Street, Suite 4 Amherst, MA 01002 (413) 549-2020 Skype-In: (413) 306-4248 Fax: (413) 825-8344 For more information, please visit: www.azurelink.com ------------------------------------------------------------------------------- On May 17, 2011, at 10:41 PM, Shel Horowitz, Ethical/Green Marketing Expert wrote: > She writes: > > At 11:30 PM +0000 5/17/11, gloyoshi at comcast.net wrote: >> A crazy thing is happning on my computer. I'm getting unasked for, >> full pages of graphic porn -- gay, s & M, etc, unasked and >> uninvited. It changes my browser to Firefox, also unasked for. >> what's going on and do I eliminate it? > > > She is on a Mac running OS 10.4. I believe her usual browser is > Safari. She's not very tech-savvy, but if anyone has a good idea to > try, I can try to help her through it. > > Please Reply to All so she and I are both in the loop. > > Thanks! > -- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20110519/1bc430ef/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: Azurelink.vcf Type: text/directory Size: 611 bytes Desc: not available Url : http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20110519/1bc430ef/attachment.bin -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20110519/1bc430ef/attachment-0001.html