FBI GreenDot MoneyPak Virus (Yosemite)

I have opened a site that contained malware the "FBI GreenDot MoneyPak Virus"


I followed the directions to get it off my system but it keeps graying out the options to clear the history.

I'm using Yosemite 10.10.1 and Safari 8.0


Anyone with any ideas?

MacBook Pro (15-inch Mid 2009), OS X Yosemite (10.10), Safari 8.0

Posted on Nov 14, 2014 12:15 PM

Reply
4 replies
Sort By: 

Nov 14, 2014 5:17 PM in response to aussie_fan

It's not malware. It's a JavaScript scam that only affects your web browser, and only temporarily. There are several ways to recover.

1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.

2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.

3. From the Safari menu bar, select

Safari ▹ Preferences... ▹ Security

and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.

Close the malicious window or tab.

Re-enable JavaScript and close the preferences dialog.

4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.

After closing the malicious page, from the menu bar, select

Safari Preferences... Privacy Remove All Website Data

to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

Reply

Nov 15, 2014 5:25 AM in response to Carolyn Samit

Carolyn Samit wrote:


It may be easier to backup your important data then reformat the disk using OS X Recovery.


That is absolutely not necessary! This is not actually a virus, or any other kind of malware. It's just a JavaScript in the web browser trying to trick the user into thinking their computer's locked up.


Linc's directions will solve the problem.

Reply

Feb 16, 2015 9:52 PM in response to Linc Davis

I just had the same thing pop up on my MacBook Air with the FBI Ransomware but I was able to close out of it. After readying everyone's comments, I don't have the option to click on "Reset Safari" on my lab. I have the OS X Yosemite (10.10.2) Software and since I don't have the option to click on the button that says "Reset Safari", I clicked on Safari, then Preferences, then I clicked on Privacy, and then I clicked on the button that said Remove All Website And Data. Then Under Privacy I looked under "Cookies and Website Data" and made sure the option "Allow from Websites I visit" to be checked in. After that I clicked on the button Security still under Preferences, and made sure that everything was checked in under "Fraudulent Sites, Web Content and Internet plug-ins". Lastly, I clicked on Safari again and then clicked on the button Clear History and Website Data. And I clicked on that about 100 times. Since I don't have the option to click on a button that says "Reset Safari" did I get rid of the virus or whatever the ransomware was that popped up out of my computer? If someone can answer me back letting me know if I did and if I didn't how can I that would be amazing. Thank you so much for your time.

****** I did not un enable JavaScript Under Security in Safari Preferences while the FBI Ransomware Page that was asking me for $300 was Open. I was able to close the website and after I was able to I cleared my History and Website Data. I hope this doesn't affect my computer and I hope that my computer does not have a virus from this. Thank you again for your help**********

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

FBI GreenDot MoneyPak Virus (Yosemite)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.