Hi Ronni,

Could you explain/elaborate the "Copy and paste the URL into Text Edit and then 
check" action please.

Thanks ,

Walter
On 19/03/2010, at 4:06 , Ronda Brown wrote:

> Hi Pat,
> 
> It does sound a bit "suss" doesn't it, if they aren't answering their phones 
> and not responding to email query … hmmm.
> Have you tried  checking the websites URL to see if it is a phishing link.
> Copy & Paste the URL into Text Edit and then check.
> 
> If you would prefer to send the URL to my Private Address & I will check it 
> for you, as we don't want the address on WAMUG for people to click on, just 
> in case it is fraudulent.
> 
> Notice in the following example that resting (but not clicking) the mouse 
> pointer on the link reveals the real Web address, as shown in the box with 
> the yellow background. 
> The string of cryptic numbers looks nothing like the company's Web address, 
> which is a suspicious sign.
> 
> 
> 
> -- The WA Macintosh User Group Mailing List --
> Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
> Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
> Unsubscribe - <mailto:[email protected]>


-- The WA Macintosh User Group Mailing List --
Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
Unsubscribe - <mailto:[email protected]>

<<inline: ZA011411871033.gif>>

> 
> 
> I know attachments are NOT to be included in WAMUG Mailing list, I'm hoping 
> the List Administrator will let me "off the hook" this one time, as I feel it 
> is important for people to know.
> 
> Cheers,
> Ronni
> 
> On 19/03/2010, at 3:18 PM, Pat wrote:
> 
>> 
>> Hi, Ronni,
>> 
>> I realise that Little Snitch only handles outgoing network connections - 
>> thus the message which gave me the opportunity to prevent the outgoing 
>> connection.  I think there might have been consequences if it had been 
>> allowed to proceed.
>> 
>> I think the local business website is infected, because of the close 
>> coincidence of the events of looking at this website and the message popping 
>> up.  I been working offline for a long time and hadn't accessed any other 
>> websites.  Of course, I could be wrong.
>> 
>> I did try to ring this business several times, but got no answer, and they 
>> did not reply to the e-mail that was sent enquiring about prices.
>> 
>> Thanks,
>> Pat
>> 
>> On 19/03/2010, at 8:42 AM, Ronda Brown wrote:
>> 
>>> 
>>> Hi Pat,
>>> 
>>> Little Snitch doesn't stop "Incoming Connections" only "Outgoing Network 
>>> Connections".
>>> 
>>> Extract taken from Little Snitch website: 
>>> <http://www.obdev.at/products/littlesnitch/faq.html>
>>> 
>>> "Little Snitch only handles outgoing network connections on all network 
>>> interfaces (AirPort, PPP, network cards, etc.). 
>>> It intercepts and defers an application’s network access until you decide 
>>> to allow or deny the request, or it handles the request automatically based 
>>> on an already defined rule.
>>> 
>>> Little Snitch does not intercept incoming connections. They can be blocked 
>>> with the built-in firewall of Mac OS X. 
>>> This firewall can be configured in System Preferences > Security > Firewall 
>>> (or in System Preferences > Sharing > Firewall on Max OS X 10.4)."
>>> 
>>> Why do you think the Local Business website is infected?
>>> 
>>> Cheers,
>>> Ronni
>>> 
>>> 17" MacBook Pro Intel Core 2 Duo
>>> 2.4 GHz / 4GB / 800MHz / 500GB
>>> OS X 10.6.2 Snow Leopard
>>> Windows 7 Ultimate (under sufferance)
>>> 
>>> 
>>> 
>>> On 19/03/2010, at 8:25 AM, Pat wrote:
>>> 
>>>> 
>>>> I had a look at cookies.  No sign of any of that.  As I think more about 
>>>> it, I think that Little Snitch saved my computer from infestation.  
>>>> Immediately before the message appeared, I had been looking at the web 
>>>> site of a local business that makes galvanised water tanks, and had sent 
>>>> them a query about prices.  I think now that their computers are infested, 
>>>> and I will ring them this morning to mention it.
>>>> 
>>>> Does this make sense?
>>>> 
>>>> Pat
>>>> 
>>>> 
>>>> 
>>>> On 18/03/2010, at 8:44 PM, Paul Weaver wrote:
>>>> 
>>>>> 
>>>>> You could open Safari/Preferences/Security/Show cookies and do a search 
>>>>> for partypoker or .ru and delete them.
>>>>> 
>>>>> Paul.
>>>>> 
>>>>> 
>>>>> ----- Original Message -----
>>>>> From: "Pat" <[email protected]>
>>>>> To: "WAMUG List" <[email protected]>
>>>>> Sent: Thursday, 18 March, 2010 6:19:09 PM GMT +08:00 Beijing / Chongqing 
>>>>> / Hong Kong / Urumqi
>>>>> Subject: Strange Safari message
>>>>> 
>>>>> 
>>>>> Little Snitch on my Mac Pro just put up a very suspicious message.  There 
>>>>> is a screen shot of it at:
>>>>> 
>>>>> http://www.wanatca.org.au/Xtra/Screen%20shot%202010-03-18%20at%206.05.12%20PM.png
>>>>> 
>>>>> Should I be worried?  Take more stringent measures?  I told Little Snitch 
>>>>> to Deny Forever to that particular entity.
>>>>> 
>>>>> Pat
>>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -- The WA Macintosh User Group Mailing List --
>>> Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
>>> Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
>>> Unsubscribe - <mailto:[email protected]>
>>> 
>> 
>> 
>> 
>> -- The WA Macintosh User Group Mailing List --
>> Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
>> Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
>> Unsubscribe - <mailto:[email protected]>
>> 
>