My wife is out-of-town visiting with her Sister. She still uses a MindSpring/EarthLink email as her primary contact addy. They don't have a very good automatic 'trash-purging' system. A couple of months ago she realized that she was slightly over the limit of stored messages. We deleted tons of trashed messages, but I realized I should probably keep an eye on how close she was to that limit from then on.
Apparently, several people who contact her have infected PC's and she has received numerous MacKeeper "offers". I'm pretty sure she knows not to accept those, and I don't think they actually appear when she uses Mail, even on her mobile devices. However, when we clean out the trashed messages at EarthLink, we must use their web-based system.
That means even selecting a bogus message's checkbox in order to use the controls to do something, the javascript runs and displays the "skies-are-falling-you-need-this-software" popup come up!
One can then use Safari's Privacy prefs to "Manage website data..." to delete the cookie. Unfortunately, the next time you go back to EarthLink and try to delete that message, you get another popup, if you don't delete it fast enough...
I'm running ClamXav and see 12 quarantined emails (.emix). "Osx.Malware.Agent-xxxx-0" marks Adobe Player Installer, Flash Player Installer and FlashPlayer dmg's. Nisus Writer Pro.app is listed under the "Rtf.Downloader.Obfuscation-6370377-2" infection. She never has used that word processor, so I'll just trash it along with all the other stuff ClamX finds.
I'll have to apologize to her for leaving these dangerous things laying around! Maybe a trip to McDonald's? :thinking: