MOTUnation.com

A new variant:

http://www.macworld.com/article/160090/ ... c.rss_main" onclick="window.open(this.href);return false;

The comments are worth reading; there is much I don't understand. Any day now there should be a full analysis of its behavior. I'm wondering if running a non-administrative account would be protective at this point.

One thing to note is the cons are now using a Finder window instead of the old recycled WinXP window.

Just so we're on the same page here... the link provided by Apple to REMOVE THE NASTY:

http://support.apple.com/kb/HT4650" onclick="window.open(this.href);return false;

Seems like one still has to blunder through an installer to get it, however running a non-administrative account seems to be the way to go:


http://reviews.cnet.com/8301-13727_7-20 ... ncol;title" onclick="window.open(this.href);return false;

Google image searches still seems to be the main delivery source, as it is with the Windows "Antivirus 20xx" scam. Probably is being propagated by the same scumsuckers.

cuttime wrote: Google image searches still seems to be the main delivery source...

Man, I am soooo screwed... ,) <--- and going blind!

There is now a security update for this scam:

http://support.apple.com/kb/HT4657" onclick="window.open(this.href);return false;

Thanks CT!

Very interesting... ONLY for Snow Leopard. I guess the Leopard is officially dead at this point?

MIDI Life Crisis wrote:Very interesting... ONLY for Snow Leopard. I guess the Leopard is officially dead at this point?

Ouch! I hadn't noticed... surely there is more forthcoming. Hell, I was on Tiger until last week and was still getting security updates quite recently.

Let's hope they're just feeding the animals in order...

MIDI Life Crisis wrote:Let's hope they're just feeding the animals in order...

Agreed. I installed the update on my Intel machines but haven't seen it for the PPCs. Thanks for the heads up.

HERE

AND HERE

Sounds like an inside job! :O

Anyone seen Mac(Defender, Guard whatever) lately? It's been weeks since I've seen this bugger, even on my PPC machines. Have these ---holes given up, or are they still trying?

NOt seen it once. At some point even a-holes give out.