That's not what's happening.
At work, for the past two days, several times a day when I open Safari and go to a site like the drudge report, the screen gets taken over by the malware attack and fake scan and it won't allow you to click cancel or navigate elsewhere.
You can only accept the download or shut down Safari and try again.
I found 18 downloads of the malware file in my downloads folder and I never accepted any download. Naturally, I deleted them all, but if the open downloads button had been ticked in Safari, it would have been a disaster.
This is a strong attack that could easily hurt some less computer-capable people.
Well hopefully the cat and mouse game leads to clues to finding who actually is behind the malware.
We need a survey asking people who actually run this thing if they:
A. Have always been Mac OS users.
B. Have converted from Windows OS.
This is no longer talking about security though, but stability. The whole registry discussion is off-topic here...you obviously don't know much about system design. a central registry is a single point of failure. distributed config files (whether .plist, .ini, or what have you) is much more fault-tolerant. plus, if you were trying to maintain a system, having to open up regedit/do key manipulation is much more annoying and error-prone versus copying over configs or swapping in and out various files
EDIT: also, "searching" domains like HKEY_CURRENT_USER etc is a joke. using distributed configuration files plugs into a much wider array of search tools than having to rely on a registry-editing-specific one. ie for example in OS X i can use spotlight, google desktop, grep, slocate, etc to quickly find what config files i need.
EDIT2: i just noticed that you refer to it as a "registry of files". uh, if that's what you think it is, you may be beyond help...
We had an intern somehow get this on a Mac at work... thankfully the uninstallation process was relatively painless and took about a minute.
Every time I get them on a PC I feel like it's an all day chore. Sometimes system restore doesn't even fix it.
It checks every day for an update. It doesn't actually update every day.
Troll?
I use Windows 7 for some of my work. My main machines are OS X and SunOS.
What I am trying to say that MS has showed a lot of effort on the security side which Apple has not, yet.
If you think I'm wrong, fine. But I don't see how I am biased towards Microsoft in this regard.
Stating Microsoft take security seriously is a troll attempt? And what do you have against the registry, I'd prefer an easily searchable central registry of files rather than a million .ini files scattered the length and breadth of my hard drive.
My guess would be 'A' ... windows users were trained over many many years to expect this **** to happen, Mac users feel safe. (I feel safe too, but I use common sense and lived in the Windows world for too long)
. Naturally, I deleted them all, but if the open downloads button had been ticked in Safari, it would have been a disaster.
This is a strong attack that could easily hurt some less computer-capable people.
I'm amazed people are still stupid enough to manually download and run this considering all the press coverage it has received.
Why is that distinction important to what I said???
The training wasn't good though. The problem goes on and on. Most of the problem is due to people going all over the internet looking for pirated software and media. Microsoft has said that some malware problems are in fact due to pirated copies of their OS.
Can this malware happen on any web browser or just safari? I mainly use chrome and Mozilla, but my gf uses safari when she comes over my house.
It auto-downloaded from a pop-up when I was on MSNBC.com about a week ago. I didn't install it of course and immediately let them know. And my mom would have totally installed it.
I shouldn't have said it was a troll attempt, my bad but the registry does need to go. The average user doesn't need it and the fact that programs can go an access each others keys is a big problem. Malware almost always manifests itself in the registry and goes and messes with other programs registry settings. Unfortunately these programs don't rewrite their registry settings so whatever has been changed by malware stays changed until removal (which usually results in reinstalling the affected software) or having to go through tons of registry keys and change values manually.
The training wasn't good though. The problem goes on and on. Most of the problem is due to people going all over the internet looking for pirated software and media. Microsoft has said that some malware problems are in fact due to pirated copies of their OS.
you obviously don't know much about system design. a central registry is a single point of failure. distributed config files (whether .plist, .ini, or what have you) is much more fault-tolerant. plus, if you were trying to maintain a system, having to open up regedit/do key manipulation is much more annoying and error-prone versus copying over configs or swapping in and out various files
EDIT: also, "searching" domains like HKEY_CURRENT_USER etc is a joke. using distributed configuration files plugs into a much wider array of search tools than having to rely on a registry-editing-specific one. ie for example in OS X i can use spotlight, google desktop, grep, slocate, etc to quickly find what config files i need.
EDIT2: i just noticed that you refer to it as a "registry of files". uh, if that's what you think it is, you may be beyond help...
Apple has no incentive to take this threat seriously. They will use it to leverage people into only using the App Store. It will prepare people for the merging of iOS and Mac OS.
Because if Apple don't update the signatures for a month then the daily checking isn't going to help.
Just because it checks daily doesn't mean it actually does anything.
I'm more worried about how they manage to inject that download code into so many sites.
Know why no Russians were ever kidnapped in 1970's Lebanon or Syria? Well actually one was, and they were killed by terrorists. So the Russian KGB found out who was responsible, kidnapped THEM, cut of their heads and sent the heads to their families. The kidnappings stopped.
Just sayin'.
Apple has no incentive to take this threat seriously. They will use it to leverage people into only using the App Store. It will prepare people for the merging of iOS and Mac OS.