{"id":15266,"date":"2016-01-05T03:45:36","date_gmt":"2016-01-05T11:45:36","guid":{"rendered":"http:\/\/37prime.com\/news\/?p=15266"},"modified":"2016-01-05T03:45:36","modified_gmt":"2016-01-05T11:45:36","slug":"fake-virus-warning-targets-mac-users-to-download-mackeeper","status":"publish","type":"post","link":"https:\/\/37prime.com\/news\/2016\/01\/05\/fake-virus-warning-targets-mac-users-to-download-mackeeper\/","title":{"rendered":"Fake Virus Warning Targets Mac Users to Download MacKeeper"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-15267\" src=\"http:\/\/37prime.com\/news\/wp-content\/uploads\/2016\/01\/macoscheckdotcom-scam-site.jpg\" alt=\"macoscheckdotcom scam site\" width=\"1920\" height=\"1080\" \/><\/p>\n<p>I received a frantic message from a friend when she saw a message that &#8220;virus found&#8221; on her Mac. She then sent me a few photos of the message.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-15268\" src=\"http:\/\/37prime.com\/news\/wp-content\/uploads\/2016\/01\/macoscheckdotcom-scam-site-fake-virus-check.jpg\" alt=\"macoscheckdotcom scam site fake virus check\" width=\"1920\" height=\"1080\" \/><\/p>\n<p>As it turns out, it is related to none other than MacKeeper. In January2014, <a href=\"https:\/\/en.wikipedia.org\/wiki\/MacKeeper#Lawsuits\" target=\"_blank\">a class action lawsuit<\/a> was filed against ZeoBIT, the maker of MacKeeper.<\/p>\n\n<p>&#8220;macoscheck.com&#8221; was registered on December 26, 2015.<\/p>\n<p>Whois info\u00a0on macoscheck.com:<\/p>\n<blockquote><p>Deus-ex-Mac:~ ultra-slacker$ whois macoscheck.com<\/p>\n<p>Whois Server Version 2.0<\/p>\n<p>Domain names in the .com and .net domains can now be registered<\/p>\n<p>with many different competing registrars. Go to http:\/\/www.internic.net<\/p>\n<p>for detailed information.<\/p>\n<p>Domain Name: MACOSCHECK.COM<\/p>\n<p>Registrar: INTERNET DOMAIN SERVICE BS CORP<\/p>\n<p>Sponsoring Registrar IANA ID: 2487<\/p>\n<p>Whois Server: whois.internet.bs<\/p>\n<p>Referral URL: http:\/\/www.internetbs.net<\/p>\n<p>Name Server: NS1.SPEEDLOADINGSERVER.COM<\/p>\n<p>Name Server: NS2.SPEEDLOADINGSERVER.COM<\/p>\n<p>Status: clientTransferProhibited http:\/\/www.icann.org\/epp#clientTransferProhibited<\/p>\n<p>Updated Date: 26-dec-2015<\/p>\n<p>Creation Date: 26-dec-2015<\/p>\n<p>Expiration Date: 26-dec-2016<\/p>\n<p>&gt;&gt;&gt; Last update of whois database: Wed, 06 Jan 2016 11:49:01 GMT &lt;&lt;&lt;<\/p>\n<p>For more information on Whois status codes, please visit<\/p>\n<p>https:\/\/www.icann.org\/resources\/pages\/epp-status-codes-2014-06-16-en.<\/p>\n<p>NOTICE: The expiration date displayed in this record is the date the<\/p>\n<p>registrar&#8217;s sponsorship of the domain name registration in the registry is<\/p>\n<p>currently set to expire. This date does not necessarily reflect the expiration<\/p>\n<p>date of the domain name registrant&#8217;s agreement with the sponsoring<\/p>\n<p>registrar. Users may consult the sponsoring registrar&#8217;s Whois database to<\/p>\n<p>view the registrar&#8217;s reported date of expiration for this registration.<\/p>\n<p>TERMS OF USE: You are not authorized to access or query our Whois<\/p>\n<p>database through the use of electronic processes that are high-volume and<\/p>\n<p>automated except as reasonably necessary to register domain names or<\/p>\n<p>modify existing registrations; the Data in VeriSign Global Registry<\/p>\n<p>Services&#8217; (&#8220;VeriSign&#8221;) Whois database is provided by VeriSign for<\/p>\n<p>information purposes only, and to assist persons in obtaining information<\/p>\n<p>about or related to a domain name registration record. VeriSign does not<\/p>\n<p>guarantee its accuracy. By submitting a Whois query, you agree to abide<\/p>\n<p>by the following terms of use: You agree that you may use this Data only<\/p>\n<p>for lawful purposes and that under no circumstances will you use this Data<\/p>\n<p>to: (1) allow, enable, or otherwise support the transmission of mass<\/p>\n<p>unsolicited, commercial advertising or solicitations via e-mail, telephone,<\/p>\n<p>or facsimile; or (2) enable high volume, automated, electronic processes<\/p>\n<p>that apply to VeriSign (or its computer systems). The compilation,<\/p>\n<p>repackaging, dissemination or other use of this Data is expressly<\/p>\n<p>prohibited without the prior written consent of VeriSign. You agree not to<\/p>\n<p>use electronic processes that are automated and high-volume to access or<\/p>\n<p>query the Whois database except as reasonably necessary to register<\/p>\n<p>domain names or modify existing registrations. VeriSign reserves the right<\/p>\n<p>to restrict your access to the Whois database in its sole discretion to ensure<\/p>\n<p>operational stability. VeriSign may restrict or terminate your access to the<\/p>\n<p>Whois database for failure to abide by these terms of use. VeriSign<\/p>\n<p>reserves the right to modify these terms at any time.<\/p>\n<p>The Registry database contains ONLY .COM, .NET, .EDU domains and<\/p>\n<p>Registrars.<\/p>\n<p>Domain Name: MACOSCHECK.COM<\/p>\n<p>Registry Domain ID: 1989721914_DOMAIN_COM-VRSN<\/p>\n<p>Registrar WHOIS Server: whois.internet.bs<\/p>\n<p>Registrar URL: http:\/\/www.internetbs.net<\/p>\n<p>Updated Date: 2015-12-26T12:22:03Z<\/p>\n<p>Creation Date: 2015-12-26T12:22:03Z<\/p>\n<p>Registrar Registration Expiration Date: 2016-12-26T12:22:03Z<\/p>\n<p>Registrar: Internet Domain Service BS Corp.<\/p>\n<p>Registrar IANA ID: 2487<\/p>\n<p>Registrar Abuse Contact Email: abuse@internet.bs<\/p>\n<p>Registrar Abuse Contact Phone: +44.7546458118<\/p>\n<p>Reseller:<\/p>\n<p>Domain Status: clientTransferProhibited &#8211; http:\/\/www.icann.org\/epp#clientTransferProhibited<\/p>\n<p>Registry Registrant ID:<\/p>\n<p>Registrant Name: Domain Admin<\/p>\n<p>Registrant Organization: Whois Privacy Corp.<\/p>\n<p>Registrant Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Registrant City: Nassau<\/p>\n<p>Registrant State\/Province: New Providence<\/p>\n<p>Registrant Postal Code: 0000<\/p>\n<p>Registrant Country: BS<\/p>\n<p>Registrant Phone: +1.5163872248<\/p>\n<p>Registrant Phone Ext:<\/p>\n<p>Registrant Fax:<\/p>\n<p>Registrant Fax Ext:<\/p>\n<p>Registrant Email: macoscheck.com-owner@customers.whoisprivacycorp.com<\/p>\n<p>Registry Admin ID:<\/p>\n<p>Admin Name: Domain Admin<\/p>\n<p>Admin Organization: Whois Privacy Corp.<\/p>\n<p>Admin Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Admin City: Nassau<\/p>\n<p>Admin State\/Province: New Providence<\/p>\n<p>Admin Postal Code: 0000<\/p>\n<p>Admin Country: BS<\/p>\n<p>Admin Phone: +1.5163872248<\/p>\n<p>Admin Phone Ext:<\/p>\n<p>Admin Fax:<\/p>\n<p>Admin Fax Ext:<\/p>\n<p>Admin Email: macoscheck.com-admin@customers.whoisprivacycorp.com<\/p>\n<p>Registry Tech ID:<\/p>\n<p>Tech Name: Domain Admin<\/p>\n<p>Tech Organization: Whois Privacy Corp.<\/p>\n<p>Tech Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Tech City: Nassau<\/p>\n<p>Tech State\/Province: New Providence<\/p>\n<p>Tech Postal Code: 0000<\/p>\n<p>Tech Country: BS<\/p>\n<p>Tech Phone: +1.5163872248<\/p>\n<p>Tech Phone Ext:<\/p>\n<p>Tech Fax:<\/p>\n<p>Tech Fax Ext:<\/p>\n<p>Tech Email: macoscheck.com-tech@customers.whoisprivacycorp.com<\/p>\n<p>Name Server: ns1.speedloadingserver.com<\/p>\n<p>Name Server: ns2.speedloadingserver.com<\/p>\n<p>DNSSEC: unsigned<\/p>\n<p>URL of the ICANN WHOIS Data Problem Reporting System: http:\/\/wdprs.internic.net\/<\/p>\n<p>&gt;&gt;&gt; Last update of WHOIS database: 2016-01-06T11:49:10Z &lt;&lt;&lt;<\/p><\/blockquote>\n<p>Whois info\u00a0on\u00a0speedloadingserver.com:<\/p>\n<blockquote><p>Deus-ex-Mac:~ ultra-slacker$ whois speedloadingserver.com<\/p>\n<p>Whois Server Version 2.0<\/p>\n<p>Domain names in the .com and .net domains can now be registered<\/p>\n<p>with many different competing registrars. Go to http:\/\/www.internic.net<\/p>\n<p>for detailed information.<\/p>\n<p>Domain Name: SPEEDLOADINGSERVER.COM<\/p>\n<p>Registrar: TLD REGISTRAR SOLUTIONS LTD<\/p>\n<p>Sponsoring Registrar IANA ID: 1564<\/p>\n<p>Whois Server: whois.tldregistrarsolutions.com<\/p>\n<p>Referral URL: http:\/\/www.tldregistrarsolutions.com<\/p>\n<p>Name Server: NS-CANADA.TOPDNS.COM<\/p>\n<p>Name Server: NS-UK.TOPDNS.COM<\/p>\n<p>Name Server: NS-USA.TOPDNS.COM<\/p>\n<p>Status: clientTransferProhibited http:\/\/www.icann.org\/epp#clientTransferProhibited<\/p>\n<p>Updated Date: 09-sep-2015<\/p>\n<p>Creation Date: 03-sep-2015<\/p>\n<p>Expiration Date: 03-sep-2016<\/p>\n<p>&gt;&gt;&gt; Last update of whois database: Wed, 06 Jan 2016 12:17:54 GMT &lt;&lt;&lt;<\/p>\n<p>For more information on Whois status codes, please visit<\/p>\n<p>https:\/\/www.icann.org\/resources\/pages\/epp-status-codes-2014-06-16-en.<\/p>\n<p>NOTICE: The expiration date displayed in this record is the date the<\/p>\n<p>registrar&#8217;s sponsorship of the domain name registration in the registry is<\/p>\n<p>currently set to expire. This date does not necessarily reflect the expiration<\/p>\n<p>date of the domain name registrant&#8217;s agreement with the sponsoring<\/p>\n<p>registrar. Users may consult the sponsoring registrar&#8217;s Whois database to<\/p>\n<p>view the registrar&#8217;s reported date of expiration for this registration.<\/p>\n<p>TERMS OF USE: You are not authorized to access or query our Whois<\/p>\n<p>database through the use of electronic processes that are high-volume and<\/p>\n<p>automated except as reasonably necessary to register domain names or<\/p>\n<p>modify existing registrations; the Data in VeriSign Global Registry<\/p>\n<p>Services&#8217; (&#8220;VeriSign&#8221;) Whois database is provided by VeriSign for<\/p>\n<p>information purposes only, and to assist persons in obtaining information<\/p>\n<p>about or related to a domain name registration record. VeriSign does not<\/p>\n<p>guarantee its accuracy. By submitting a Whois query, you agree to abide<\/p>\n<p>by the following terms of use: You agree that you may use this Data only<\/p>\n<p>for lawful purposes and that under no circumstances will you use this Data<\/p>\n<p>to: (1) allow, enable, or otherwise support the transmission of mass<\/p>\n<p>unsolicited, commercial advertising or solicitations via e-mail, telephone,<\/p>\n<p>or facsimile; or (2) enable high volume, automated, electronic processes<\/p>\n<p>that apply to VeriSign (or its computer systems). The compilation,<\/p>\n<p>repackaging, dissemination or other use of this Data is expressly<\/p>\n<p>prohibited without the prior written consent of VeriSign. You agree not to<\/p>\n<p>use electronic processes that are automated and high-volume to access or<\/p>\n<p>query the Whois database except as reasonably necessary to register<\/p>\n<p>domain names or modify existing registrations. VeriSign reserves the right<\/p>\n<p>to restrict your access to the Whois database in its sole discretion to ensure<\/p>\n<p>operational stability. VeriSign may restrict or terminate your access to the<\/p>\n<p>Whois database for failure to abide by these terms of use. VeriSign<\/p>\n<p>reserves the right to modify these terms at any time.<\/p>\n<p>The Registry database contains ONLY .COM, .NET, .EDU domains and<\/p>\n<p>Registrars.<\/p>\n<p>Domain Name: SPEEDLOADINGSERVER.COM<\/p>\n<p>Registry Domain ID: 1957177560_DOMAIN_COM-VRSN<\/p>\n<p>Registrar WHOIS Server: whois.tldregistrarsolutions.com<\/p>\n<p>Registrar URL: http:\/\/www.tldregistrarsolutions.com<\/p>\n<p>Updated Date: 2015-09-09T07:28:32Z<\/p>\n<p>Creation Date: 2015-09-03T07:26:31Z<\/p>\n<p>Registrar Registration Expiration Date: 2016-09-03T07:26:31Z<\/p>\n<p>Registrar: TLD Registrar Solutions Ltd.<\/p>\n<p>Registrar IANA ID: 1564<\/p>\n<p>Registrar Abuse Contact Email: abuse@tldregistrarsolutions.com<\/p>\n<p>Registrar Abuse Contact Phone: +44.2034357312<\/p>\n<p>Reseller:<\/p>\n<p>Domain Status: clientTransferProhibited &#8211; http:\/\/www.icann.org\/epp#clientTransferProhibited<\/p>\n<p>Registry Registrant ID:<\/p>\n<p>Registrant Name: Domain Admin<\/p>\n<p>Registrant Organization: Whois Privacy Corp.<\/p>\n<p>Registrant Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Registrant City: Nassau<\/p>\n<p>Registrant State\/Province: New Providence<\/p>\n<p>Registrant Postal Code: 0000<\/p>\n<p>Registrant Country: BS<\/p>\n<p>Registrant Phone: +1.5163872248<\/p>\n<p>Registrant Phone Ext:<\/p>\n<p>Registrant Fax:<\/p>\n<p>Registrant Fax Ext:<\/p>\n<p>Registrant Email: speedloadingserver.com-owner@customers.whoisprivacycorp.com<\/p>\n<p>Registry Admin ID:<\/p>\n<p>Admin Name: Domain Admin<\/p>\n<p>Admin Organization: Whois Privacy Corp.<\/p>\n<p>Admin Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Admin City: Nassau<\/p>\n<p>Admin State\/Province: New Providence<\/p>\n<p>Admin Postal Code: 0000<\/p>\n<p>Admin Country: BS<\/p>\n<p>Admin Phone: +1.5163872248<\/p>\n<p>Admin Phone Ext:<\/p>\n<p>Admin Fax:<\/p>\n<p>Admin Fax Ext:<\/p>\n<p>Admin Email: speedloadingserver.com-admin@customers.whoisprivacycorp.com<\/p>\n<p>Registry Tech ID:<\/p>\n<p>Tech Name: Domain Admin<\/p>\n<p>Tech Organization: Whois Privacy Corp.<\/p>\n<p>Tech Street: Ocean Centre, Montagu Foreshore, East Bay Street<\/p>\n<p>Tech City: Nassau<\/p>\n<p>Tech State\/Province: New Providence<\/p>\n<p>Tech Postal Code: 0000<\/p>\n<p>Tech Country: BS<\/p>\n<p>Tech Phone: +1.5163872248<\/p>\n<p>Tech Phone Ext:<\/p>\n<p>Tech Fax:<\/p>\n<p>Tech Fax Ext:<\/p>\n<p>Tech Email: speedloadingserver.com-tech@customers.whoisprivacycorp.com<\/p>\n<p>Name Server: ns-canada.topdns.com<\/p>\n<p>Name Server: ns-uk.topdns.com<\/p>\n<p>Name Server: ns-usa.topdns.com<\/p>\n<p>DNSSEC: unsigned<\/p>\n<p>URL of the ICANN WHOIS Data Problem Reporting System: http:\/\/wdprs.internic.net\/<\/p>\n<p>&gt;&gt;&gt; Last update of WHOIS database: 2016-01-06T12:16:03Z &lt;&lt;&lt;<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>I received a frantic message from a friend when she saw a message that &#8220;virus found&#8221; on her Mac. She then sent me a few photos of the message. As it turns out, it is related to none other than MacKeeper. In January2014, a class action lawsuit was filed against ZeoBIT, the maker of MacKeeper. &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/37prime.com\/news\/2016\/01\/05\/fake-virus-warning-targets-mac-users-to-download-mackeeper\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Fake Virus Warning Targets Mac Users to Download MacKeeper&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":15267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4],"tags":[9,2229,2619,2648,936],"class_list":["post-15266","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-mac","tag-os-x","tag-scam","tag-security","tag-tech"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pcNtU-3Ye","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/15266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/comments?post=15266"}],"version-history":[{"count":0,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/15266\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/media?parent=15266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/categories?post=15266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/tags?post=15266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}