7/21/2013

[macsupport] Digest Number 9664

Mac Support Central

15 New Messages

Digest #9664
1a
Re: FBI has locked my browser by "Jim Hamm" jimhamm90
1b
Re: FBI has locked my browser by "keith_w" keith9600
1c
Re: FBI has locked my browser by "Forrest Leedy" forrkazu
1d
Re: FBI has locked my browser by "Kenneth Silva" avliska
1e
Re: FBI has locked my browser by "OBrien" conorboru
1f
Re: FBI has locked my browser by "Pat Taylor" pat412255
1g
Re: FBI has locked my browser by "Dane Reugger" dar2112
1i
Re: FBI has locked my browser by "Kenneth Silva" avliska
1l
Re: FBI has locked my browser by "Jim Hamm" jimhamm90
1n
Re: FBI has locked my browser by "Dane Reugger" dar2112
1o
Re: FBI has locked my browser by "Randy B. Singer" randybrucesinger

Messages

Sun Jul 21, 2013 8:24 am (PDT) . Posted by:

"Jim Hamm" jimhamm90

Ken, according to this
<https://discussions.apple.com/message/22472700#22472700#22472700>discussion
this virus only infects Windows PCs. Apparently you are picking this up
from a website in your browser. Force quit the browser. When restarting the
browser hold down the shift key so previous pages don't reopen....Jim

On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:

> **
>
>
> I just got a window pop up on Safari that says the FBI has locked my
> computer because of copyright or porno or illegal activity. They want me to
> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
> amount of money to unlock my computer.
> Do any of you have any idea what this is all about. I don't think I was
> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
> I shut down and restarted the computer, but the window came back upon
> restart.
> I can't get rid of that FBI window, although I can still use Safari and
> open another window.
> Thanks.
> Ken S.
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 9:05 am (PDT) . Posted by:

"keith_w" keith9600

An interesting solution.
I had been under the impression the trick of holding the shift key down
during a restart only applied to the Finder and the current session of
what's loaded on stage, as it were...
If it works with all other apps, it brings another tool to help in solving
glitches in software.
Thanks for bringing it up!

keith whaley

On Sun, Jul 21, 2013 at 8:24 AM, Jim Hamm <machamm@gmail.com> wrote:

> Ken, according to this
> <https://discussions.apple.com/message/22472700#22472700#22472700
> >discussion
> this virus only infects Windows PCs. Apparently you are picking this up
> from a website in your browser. Force quit the browser. When restarting the
> browser hold down the shift key so previous pages don't reopen....Jim
>
>
> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>
> > **
> >
> >
> > I just got a window pop up on Safari that says the FBI has locked my
> > computer because of copyright or porno or illegal activity. They want me
> to
> > go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
> > amount of money to unlock my computer.
> > Do any of you have any idea what this is all about. I don't think I was
> > doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
> > I shut down and restarted the computer, but the window came back upon
> > restart.
> > I can't get rid of that FBI window, although I can still use Safari and
> > open another window.
> > Thanks.
> > Ken S.
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 9:27 am (PDT) . Posted by:

"Forrest Leedy" forrkazu

Not so in accordance with what the FBI said at this site:

<http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369>

They did not say anything about other PC's though. I would assume that it would affect any PC's though.

Forrest

On Jul 21, 2013, at 11:24 AM, Jim Hamm <machamm@gmail.com> wrote:

> Ken, according to this
> <https://discussions.apple.com/message/22472700#22472700#22472700>discussion
> this virus only infects Windows PCs. Apparently you are picking this up
> from a website in your browser. Force quit the browser. When restarting the
> browser hold down the shift key so previous pages don't reopen....Jim
>
>
> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>
>> **
>>
>>
>> I just got a window pop up on Safari that says the FBI has locked my
>> computer because of copyright or porno or illegal activity. They want me to
>> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
>> amount of money to unlock my computer.
>> Do any of you have any idea what this is all about. I don't think I was
>> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
>> I shut down and restarted the computer, but the window came back upon
>> restart.
>> I can't get rid of that FBI window, although I can still use Safari and
>> open another window.
>> Thanks.
>> Ken S.
>>
>>
>>

Sun Jul 21, 2013 10:09 am (PDT) . Posted by:

"Kenneth Silva" avliska

Jim, I ought to mention that it occurred while I was playing on-line PacMan at a site that I've been playing it for 5 or 6 years without a problem. For whatever that's worth. The advice to reset Safari has proven successful. I didn't try the holding down the shift key.
Ken S.

On Jul 21, 2013, at 8:24 AM, Jim Hamm <machamm@gmail.com> wrote:

> Ken, according to this
> <https://discussions.apple.com/message/22472700#22472700#22472700>discussion
> this virus only infects Windows PCs. Apparently you are picking this up
> from a website in your browser. Force quit the browser. When restarting the
> browser hold down the shift key so previous pages don't reopen....Jim
>
>
> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>
>> **
>>
>>
>> I just got a window pop up on Safari that says the FBI has locked my
>> computer because of copyright or porno or illegal activity. They want me to
>> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
>> amount of money to unlock my computer.
>> Do any of you have any idea what this is all about. I don't think I was
>> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
>> I shut down and restarted the computer, but the window came back upon
>> restart.
>> I can't get rid of that FBI window, although I can still use Safari and
>> open another window.
>> Thanks.
>> Ken S.
>>
>>
>>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>

Sun Jul 21, 2013 10:12 am (PDT) . Posted by:

"OBrien" conorboru

On Sun, 21 Jul 2013 12:27:51 -0400, Forrest Leedy wrote:
> Not so in accordance with what the FBI said at this site:
>
> <http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369>

Just to be clear, I think this isn't a virus, but malware which isn't the same thing. That's why it's affecting Macs.

The last I remember reading anything about it, there were no viruses for Mac. Is this right?


. . . . . . . . . . . . . . . . . . . . . .

O'Brien â€"â€"â€" â€"... .-. .. . -.

Sun Jul 21, 2013 10:27 am (PDT) . Posted by:

"Pat Taylor" pat412255

That's what Randy Singer said the last time the subject came up.

Sent from my iPad...

On Jul 21, 2013, at 11:12 AM, OBrien <bco@hiwaay.net> wrote:

> The last I remember reading anything about it, there were no viruses for Mac. Is this right?
>
>
> . . . . . . . . . . . . . . . . . . . . . .
>
> O'Brien â€"â€"â€" â€"... .-. .. . -.

Sun Jul 21, 2013 10:52 am (PDT) . Posted by:

"Dane Reugger" dar2112

Malware is a generic term that includes viruses, trojans, etc. The Moneypak
"virus" is actually a form of ransomware but would be considered more of a
trojan than a virus.

-Dane

On Sun, Jul 21, 2013 at 12:12 PM, OBrien <bco@hiwaay.net> wrote:

> On Sun, 21 Jul 2013 12:27:51 -0400, Forrest Leedy wrote:
> > Not so in accordance with what the FBI said at this site:
> >
> > <
> http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369
> >
>
> Just to be clear, I think this isn't a virus, but malware which isn't the
> same thing. That's why it's affecting Macs.
>
> The last I remember reading anything about it, there were no viruses for
> Mac. Is this right?
>
>
> . . . . . . . . . . . . . . . . . . . . . .
>
> O'Brien ––– –... .-. .. . -.
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 12:09 pm (PDT) . Posted by:

"N.A. Nada"

Guys, think about it for a second. The way they are doing it, only the use of Safari is truly aimed at OS X. If they had chosen IE, the message would have indicated a

All it is doing is persistently opening windows in Safari. Interfering up the browser, the same as some porn sites do by putting another window in the user's way. To clear it you have to quite the browser. All the rest is social engineering. By singling out Safari they are about 99% sure it is a Mac user, so the message seems to relate to the user. From there they are looking for those with a poor computer skill level.

The OP was able to quit the computer, so it was operable, and he was able to open more windows in Safari. He bad guys were looking for someone with a very low skill level. The OP was above that level, and did not fall for the social engineering.

From a former co-worker, who uses Windows, the PC version actually locks up the PC. Within 2 weeks he had to take his laptop into have the malware removed from it. (Couldn't have happened to a nicer guy. >;0) )

Brent

On Jul 21, 2013, at 9:27 AM, Forrest Leedy wrote:

Not so in accordance with what the FBI said at this site:

<http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369>

They did not say anything about other PC's though. I would assume that it would affect any PC's though.

Forrest

On Jul 21, 2013, at 11:24 AM, Jim Hamm <machamm@gmail.com> wrote:

> Ken, according to this
> <https://discussions.apple.com/message/22472700#22472700#22472700>discussion
> this virus only infects Windows PCs. Apparently you are picking this up
> from a website in your browser. Force quit the browser. When restarting the
> browser hold down the shift key so previous pages don't reopen....Jim
>
>
> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>
>> **
>>
>>
>> I just got a window pop up on Safari that says the FBI has locked my
>> computer because of copyright or porno or illegal activity. They want me to
>> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
>> amount of money to unlock my computer.
>> Do any of you have any idea what this is all about. I don't think I was
>> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
>> I shut down and restarted the computer, but the window came back upon
>> restart.
>> I can't get rid of that FBI window, although I can still use Safari and
>> open another window.
>> Thanks.
>> Ken S.
>>
>>
>>

------------------------------------

Group FAQ:
<http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>

Yahoo! Groups Links

Sun Jul 21, 2013 12:13 pm (PDT) . Posted by:

"Kenneth Silva" avliska

OP has very poor computer skills. I know because I am the OP. However, I just learned how to take a screen shot of the offending window and here it is for those interested.

On Jul 21, 2013, at 12:09 PM, N.A. Nada <whodo678@comcast.net> wrote:

> Guys, think about it for a second. The way they are doing it, only the use of Safari is truly aimed at OS X. If they had chosen IE, the message would have indicated a
>
> All it is doing is persistently opening windows in Safari. Interfering up the browser, the same as some porn sites do by putting another window in the user's way. To clear it you have to quite the browser. All the rest is social engineering. By singling out Safari they are about 99% sure it is a Mac user, so the message seems to relate to the user. From there they are looking for those with a poor computer skill level.
>
> The OP was able to quit the computer, so it was operable, and he was able to open more windows in Safari. He bad guys were looking for someone with a very low skill level. The OP was above that level, and did not fall for the social engineering.
>
> From a former co-worker, who uses Windows, the PC version actually locks up the PC. Within 2 weeks he had to take his laptop into have the malware removed from it. (Couldn't have happened to a nicer guy. >;0) )
>
> Brent
>
>
> On Jul 21, 2013, at 9:27 AM, Forrest Leedy wrote:
>
> Not so in accordance with what the FBI said at this site:
>
> <http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369>
>
> They did not say anything about other PC's though. I would assume that it would affect any PC's though.
>
> Forrest
>
> On Jul 21, 2013, at 11:24 AM, Jim Hamm <machamm@gmail.com> wrote:
>
>> Ken, according to this
>> <https://discussions.apple.com/message/22472700#22472700#22472700>discussion
>> this virus only infects Windows PCs. Apparently you are picking this up
>> from a website in your browser. Force quit the browser. When restarting the
>> browser hold down the shift key so previous pages don't reopen....Jim
>>
>>
>> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>>
>>> **
>>>
>>>
>>> I just got a window pop up on Safari that says the FBI has locked my
>>> computer because of copyright or porno or illegal activity. They want me to
>>> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
>>> amount of money to unlock my computer.
>>> Do any of you have any idea what this is all about. I don't think I was
>>> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
>>> I shut down and restarted the computer, but the window came back upon
>>> restart.
>>> I can't get rid of that FBI window, although I can still use Safari and
>>> open another window.
>>> Thanks.
>>> Ken S.
>>>
>>>
>>>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 12:18 pm (PDT) . Posted by:

"N.A. Nada"

This is not Moneypak, this is all related to a browser and it's caches. Nothing other than more was put on the Mac.

On a PC, Moneypak locks up the whole computer, and takes serious efforts to find and remove from the computer. That is a virus.

What the OP ran across a link placed on a site he regularly visits, that persistently opened window after window, and that is all. 99.9% social engineering, and 0.1% code for a browser window. Nothing more. No Virus, No Malware on the computer.

Brent

On Jul 21, 2013, at 10:52 AM, Dane Reugger wrote:

Malware is a generic term that includes viruses, trojans, etc. The Moneypak
"virus" is actually a form of ransomware but would be considered more of a
trojan than a virus.

-Dane

On Sun, Jul 21, 2013 at 12:12 PM, OBrien <bco@hiwaay.net> wrote:

> On Sun, 21 Jul 2013 12:27:51 -0400, Forrest Leedy wrote:
>> Not so in accordance with what the FBI said at this site:
>>
>> <
> http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369
>>
>
> Just to be clear, I think this isn't a virus, but malware which isn't the
> same thing. That's why it's affecting Macs.
>
> The last I remember reading anything about it, there were no viruses for
> Mac. Is this right?
>
>
> . . . . . . . . . . . . . . . . . . . . . .
>
> O'Brien ˆˆˆ ˆ... .-. .. . -.
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>

[Non-text portions of this message have been removed]

------------------------------------

Group FAQ:
<http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>

Yahoo! Groups Links

Sun Jul 21, 2013 12:22 pm (PDT) . Posted by:

"N.A. Nada"

Read the Apple discussion in the link Jim gives below.

It says "That virus only runs on Windows."

And nothing has changed. It is just a persistent browser window.

On Jul 21, 2013, at 8:24 AM, Jim Hamm wrote:

Ken, according to this
<https://discussions.apple.com/message/22472700#22472700#22472700>discussion
this virus only infects Windows PCs. Apparently you are picking this up
from a website in your browser. Force quit the browser. When restarting the
browser hold down the shift key so previous pages don't reopen....Jim

Sun Jul 21, 2013 12:31 pm (PDT) . Posted by:

"Jim Hamm" jimhamm90

That FBI website was interesting to read about the ransomware and the use
of Javascript. Previously, Java was the problem and should be disabled in
browsers. Wonder if we'll read more about Javascript vulnerability?

As a side note I noticed there was an email address to forward spam to at
the Federal Trade Commission. Wonder what that would do? Anyway, that's
off-topic for this particular discussion...Jim

On Sun, Jul 21, 2013 at 12:09 PM, N.A. Nada <whodo678@comcast.net> wrote:

> Guys, think about it for a second. The way they are doing it, only the use
> of Safari is truly aimed at OS X. If they had chosen IE, the message would
> have indicated a
>
> All it is doing is persistently opening windows in Safari. Interfering up
> the browser, the same as some porn sites do by putting another window in
> the user's way. To clear it you have to quite the browser. All the rest is
> social engineering. By singling out Safari they are about 99% sure it is a
> Mac user, so the message seems to relate to the user. From there they are
> looking for those with a poor computer skill level.
>
> The OP was able to quit the computer, so it was operable, and he was able
> to open more windows in Safari. He bad guys were looking for someone with a
> very low skill level. The OP was above that level, and did not fall for the
> social engineering.
>
> From a former co-worker, who uses Windows, the PC version actually locks
> up the PC. Within 2 weeks he had to take his laptop into have the malware
> removed from it. (Couldn't have happened to a nicer guy. >;0) )
>
> Brent
>
>
> On Jul 21, 2013, at 9:27 AM, Forrest Leedy wrote:
>
> Not so in accordance with what the FBI said at this site:
>
> <
> http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369
> >
>
> They did not say anything about other PC's though. I would assume that it
> would affect any PC's though.
>
> Forrest
>
> On Jul 21, 2013, at 11:24 AM, Jim Hamm <machamm@gmail.com> wrote:
>
> > Ken, according to this
> > <https://discussions.apple.com/message/22472700#22472700#22472700
> >discussion
> > this virus only infects Windows PCs. Apparently you are picking this up
> > from a website in your browser. Force quit the browser. When restarting
> the
> > browser hold down the shift key so previous pages don't reopen....Jim
> >
> >
> > On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
> >
> >> **
> >>
> >>
> >> I just got a window pop up on Safari that says the FBI has locked my
> >> computer because of copyright or porno or illegal activity. They want
> me to
> >> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
> >> amount of money to unlock my computer.
> >> Do any of you have any idea what this is all about. I don't think I was
> >> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
> >> I shut down and restarted the computer, but the window came back upon
> >> restart.
> >> I can't get rid of that FBI window, although I can still use Safari and
> >> open another window.
> >> Thanks.
> >> Ken S.
> >>
> >>
> >>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 12:37 pm (PDT) . Posted by:

"N.A. Nada"

Don't put yourself down. You did well. Especially, in not falling for the social engineering.

You shut down your Mac to try and clear any issue. Then you figured out you could open other Safari windows and then you looked for more help.

You recognize your skill level, but you didn't panic, you were cautious and you knew where to seek help. Very reasonable and good. And you knew where to look for help. No one can know everything. I think you need to move your judgement of your level up a notch or two.

Brent
- Boy, I need to proofread my posts better.

On Jul 21, 2013, at 12:13 PM, Kenneth Silva wrote:

OP has very poor computer skills. I know because I am the OP. However, I just learned how to take a screen shot of the offending window and here it is for those interested.

On Jul 21, 2013, at 12:09 PM, N.A. Nada <whodo678@comcast.net> wrote:

> Guys, think about it for a second. The way they are doing it, only the use of Safari is truly aimed at OS X. If they had chosen IE, the message would have indicated a
>
> All it is doing is persistently opening windows in Safari. Interfering up the browser, the same as some porn sites do by putting another window in the user's way. To clear it you have to quite the browser. All the rest is social engineering. By singling out Safari they are about 99% sure it is a Mac user, so the message seems to relate to the user. From there they are looking for those with a poor computer skill level.
>
> The OP was able to quit the computer, so it was operable, and he was able to open more windows in Safari. He bad guys were looking for someone with a very low skill level. The OP was above that level, and did not fall for the social engineering.
>
> From a former co-worker, who uses Windows, the PC version actually locks up the PC. Within 2 weeks he had to take his laptop into have the malware removed from it. (Couldn't have happened to a nicer guy. >;0) )
>
> Brent
>
>
> On Jul 21, 2013, at 9:27 AM, Forrest Leedy wrote:
>
> Not so in accordance with what the FBI said at this site:
>
> <http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369>
>
> They did not say anything about other PC‚s though. I would assume that it would affect any PC‚s though.
>
> Forrest
>
> On Jul 21, 2013, at 11:24 AM, Jim Hamm <machamm@gmail.com> wrote:
>
>> Ken, according to this
>> <https://discussions.apple.com/message/22472700#22472700#22472700>discussion
>> this virus only infects Windows PCs. Apparently you are picking this up
>> from a website in your browser. Force quit the browser. When restarting the
>> browser hold down the shift key so previous pages don't reopen....Jim
>>
>>
>> On Sat, Jul 20, 2013 at 4:04 PM, Ken <avlisk@cox.net> wrote:
>>
>>> **
>>>
>>>
>>> I just got a window pop up on Safari that says the FBI has locked my
>>> computer because of copyright or porno or illegal activity. They want me to
>>> go to Walmart and buy a MoneyPac, whatever that is, and pay someone some
>>> amount of money to unlock my computer.
>>> Do any of you have any idea what this is all about. I don't think I was
>>> doing anything illegal on my MacBook, Safari 6.0.5, ML 10.8.4.
>>> I shut down and restarted the computer, but the window came back upon
>>> restart.
>>> I can't get rid of that FBI window, although I can still use Safari and
>>> open another window.
>>> Thanks.
>>> Ken S.
>>>
>>>
>>>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>

[Non-text portions of this message have been removed]

------------------------------------

Group FAQ:
<http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>

Yahoo! Groups Links

Sun Jul 21, 2013 1:20 pm (PDT) . Posted by:

"Dane Reugger" dar2112

Interesting ... I had assumed it was the hijack page that infects PCs and
just wouldn't go away. That's why I assumed a browser reset would do the
trick.

But apparently it is actually designed for Macs but will affect Windows
(and I assume Linux) as well. Even though it's a simple javascript I would
still consider it ransomware as you must disable it or pay.

FWIW removing the Windows MoneyPak virus is not that difficult but does
does require more effort than simply resetting a browsers start page.

This was the best article I found explaining the what and how.

http://blog.malwarebytes.org/intelligence/2013/07/qa-about-the-latest-html-ransomware-affecting-mac-os-x-users/

The HTML source is there and in the comments I saw a few people had very
creative ways of disabling this without even closing safari.

-Dane

On Sun, Jul 21, 2013 at 2:18 PM, N.A. Nada <whodo678@comcast.net> wrote:

> This is not Moneypak, this is all related to a browser and it's caches.
> Nothing other than more was put on the Mac.
>
> On a PC, Moneypak locks up the whole computer, and takes serious efforts
> to find and remove from the computer. That is a virus.
>
> What the OP ran across a link placed on a site he regularly visits, that
> persistently opened window after window, and that is all. 99.9% social
> engineering, and 0.1% code for a browser window. Nothing more. No Virus, No
> Malware on the computer.
>
> Brent
>
>
> On Jul 21, 2013, at 10:52 AM, Dane Reugger wrote:
>
> Malware is a generic term that includes viruses, trojans, etc. The Moneypak
> "virus" is actually a form of ransomware but would be considered more of a
> trojan than a virus.
>
> -Dane
>
>
> On Sun, Jul 21, 2013 at 12:12 PM, OBrien <bco@hiwaay.net> wrote:
>
> > On Sun, 21 Jul 2013 12:27:51 -0400, Forrest Leedy wrote:
> >> Not so in accordance with what the FBI said at this site:
> >>
> >> <
> >
> http://www.fbi.gov/scams-safety/e-scams?utm_campaign=email-Immediate&utm_content=241369
> >>
> >
> > Just to be clear, I think this isn't a virus, but malware which isn't the
> > same thing. That's why it's affecting Macs.
> >
> > The last I remember reading anything about it, there were no viruses for
> > Mac. Is this right?
> >
> >
> > . . . . . . . . . . . . . . . . . . . . . .
> >
> > O'Brien ˆË†Ã‹† ˆ... .-. .. . -.
> >
> > ------------------------------------
> >
> > Group FAQ:
> > <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
> >
> > Yahoo! Groups Links
> >
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>
>
>
> ------------------------------------
>
> Group FAQ:
> <http://tech.groups.yahoo.com/group/macsupportcentral/files/faq.htm>
>
> Yahoo! Groups Links
>
>
>
>

[Non-text portions of this message have been removed]

Sun Jul 21, 2013 3:34 pm (PDT) . Posted by:

"Randy B. Singer" randybrucesinger


On Jul 21, 2013, at 10:12 AM, OBrien wrote:

> The last I remember reading anything about it, there were no viruses for Mac. Is this right?

There are no "viruses" for the Mac, defined as malware that can self-propagate.

There *is* malware:
http://www.thesafemac.com/mmg-catalog/

Currently, if you have all of Apple's updates installed, there is nothing that can cause you harm.

___________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)

Macintosh OS X Routine Maintenance
http://www.macattorney.com/ts.html
___________________________________________