Apple has just released Security Update 2011-003 via Software Update which will automatically remove the Mac Defender malware if found.
The support document states the following:
Security Update 2011-003
File Quarantine
- Available for: Mac OS X v10.6.7, Mac OS X Server v10.6.7
- Impact: Definition added
- Description: The OSX.MacDefender.A definition has been added to the malware check within File Quarantine. Information on File Quarantine is available in this Knowledge Base article: http://support.apple.com/kb/HT3662
File Quarantine
- Available for: Mac OS X v10.6.7, Mac OS X Server v10.6.7
- Impact: Automatically update the known malware definitions
- Description: The system will check daily for updates to the File Quarantine malware definition list. An opt-out capability is provided via the “Automatically update safe downloads list” checkbox in Security Preferences. Additional information is available in this Knowledge Base article: http://support.apple.com/kb/HT4651
Malware removal
- Available for: Mac OS X v10.6.7, Mac OS X Server v10.6.7
- Impact: Remove the MacDefender malware if detected
- Description: The installation process for this update will search for and remove known variants of the MacDefender malware. If a known variant was detected and removed, the user will be notified via an alert after the update is installed. Additional information is available in this Knowledge Base article: http://support.apple.com/kb/HT4651
Mac Defender has gained quite a bit of attention when it was told that AppleCare was instructed to not remove the malware if found. Also, Mac Defender already has a new variant that does not require an Administrator password for installation.
Make sure to hit up Software Update ASAP or if infected check out how Apple says to remove it here.
(via Apple)
Comments