RegistryScan.cc tells my Mac I have a Windows Malware infection

I was happily working along this afternoon when suddenly I received a Skype pop-up text message. I rarely use Skype for text messaging, sticking with Adium for that. It’s usually some Skype SPAM asking me to come to some lonely woman’s web page to see pictures of her. This time the message looked pretty ominous:

Obviously this is just a SPAM attempt to get someone to jump over to a web site. Kind of tough for my Mac running Leopard to get a Registry hack installed. At the bottom of the message was a link to go to the offending site:

http://www.registryscan.cc/?q=scan

Out of curiosity I decided to jump over and take a look at the page. I’m running a Mac and it was pretty clear this was targeting Windows machines. What I got was this:


Just trying to navigate away from the site presented me with this little pop-up:


What do I love about all of this? Let’s see:

  • The animation leading up to the above screen shot looks like a Windows progress dialog
  • The Windows XP style dialogs were very nicely done
  • The ScanAlert motto: Making the web Hacker Safe! (technically doesn’t that mean it’s making it safe for hackers???)
  • The line “You PC is still with spyware!” makes me think a LOLCat is responsible
  • That I’m running a Mac

Needless to say the people that pull this crap need to be removed from the Internet. Funny thing is I did a quick search and found this reference to the problem on a Microsoft discussion forum where a Windows user fell for it. There’s even a blog post from nearly a month ago from Alex Eckleberry identifying this same site and issue, yet it’s still running around today.

Anyone out there know how to stop people like this? Is there a good place to report this kind of behavior? I can see non-technical people falling hard for things like this.


Visit DavidAlison.com