PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Apple Issues Anti-Malware Update For MacDefender

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Apple has issued Security Update 2011-003 for OS X v10.6.7 to add the OSX.MacDefender.A definition to Snow Leopard's File Quarantine feature, and to "...search for and remove known variants of the MacDefender malware."
HT4651_new3d----en.png

[Edited to add:] The update also will cause OS X to check the Apple mothership for updates to the malware definitions every day.

It does not specifically mention Leopard, the 10.5 generation of OS X which is still technically being supported. Leopard has a more generic warning available that the user has downloaded a program file which could be harmful.

HT3662-1c.png

This capability in both Leopard and Snow Leopard is only invoked in file quarantine-aware applications that download files from the Internet, or receive files from external sources (such as email attachments). According to Apple, these applications "...will attach file quarantine attributes. When you open a potentially unsafe file in Finder, Spotlight, or from the Dock, the file quarantine feature will warn you about unsafe file types." So it's possible that if you use another program, such as Firefox, you will not be warned.

But the major problem with this update is that it is already out of date. The malware's authors have already released a new variant that is more deadly. If Apple plans to keep issuing such updates they have a busy summer ahead.

About Our Expert

Larry Seltzer

Larry Seltzer

Larry Seltzer has been writing software for and English about computers ever since—much to his own amazement—he graduated from the University of Pennsylvania in 1983.

He was one of the authors of NPL and NPL-R, fourth-generation languages for microcomputers by the now-defunct DeskTop Software Corporation. (Larry is sad to find absolutely no hits on any of these +products on Google.) His work at Desktop Software included programming the UCSD p-System, a virtual machine-based operating system with portable binaries that pre-dated Java by more than 10 years.

For several years, he wrote corporate software for Mathematica Policy Research (they're still in business!) and Chase Econometrics (not so lucky) before being forcibly thrown into the consulting market. He bummed around the Philadelphia consulting and contract-programming scenes for a year or two before taking a job at NSTL (National Software Testing Labs) developing product tests and managing contract testing for the computer industry, governments and publication.

In 1991 Larry moved to Massachusetts to become Technical Director of PC Week Labs (now eWeek Labs). He moved within Ziff Davis to New York in 1994 to run testing at Windows Sources. In 1995, he became Technical Director for Internet product testing at PC Magazine and stayed there till 1998.

Since then, he has been writing for numerous other publications, including Fortune Small Business, Windows 2000 Magazine (now Windows and .NET Magazine), ZDNet and Sam Whitmore's Media Survey.

He is co-author of Linksys Networks: The Official Guide, author of ADMIN911: Windows 2000 Terminal Services and Webmaster of ADMIN911 and CPA911.

Larry can be reached at larryseltzer@ziffdavis.com.

Check out Larry Seltzer's introductory column: Ziff Davis' Security Supersite: Blocking the Bad Guys

Read full bio