All Posts by Date or last 15, 30, 90 or 180 days.
also by Lloyd: diglloyd.com photography and WindInMyFace.com

Thank you for buying via links and ads on this site,
which earn me advertising fees or commissions.
As an Amazon Associate I earn from qualifying purchases.

Other World Computing...
B&H Photo...
Amazon
As an Amazon Associate I earn from qualifying purchases.
Upgrade the memory of your 2020 iMac up to 128GB
877-865-7002
Today’s Deal Zone Items... Handpicked deals...
$348 $298
SAVE $50

$170 $120
SAVE $50

$300 $175
SAVE $125

$989 $869
SAVE $120

$400 $310
SAVE $90

$1470 $1299
SAVE $171

$322 $242
SAVE $80

$1470 $1299
SAVE $171

$180 $140
SAVE $40

$500 $275
SAVE $225

$180 $156
SAVE $24

$130 $100
SAVE $30

$3498 $2998
SAVE $500

$1699 $1149
SAVE $550

$280 $230
SAVE $50

$1899 $1499
SAVE $400

$4499 $3499
SAVE $1000

$2198 $1998
SAVE $200

$3998 $3498
SAVE $500

$1799 $1699
SAVE $100

$18599 $16599
SAVE $2000

$1149 $849
SAVE $300

$650 $450
SAVE $200

$199 $119
SAVE $80

$280 $200
SAVE $80

$1399 $1049
SAVE $350

$1199 $779
SAVE $420

$250 $220
SAVE $30

$1699 $1149
SAVE $550

$195 $125
SAVE $70

$79 $49
SAVE $30

$120 $30
SAVE $90

$198 $148
SAVE $50

$3899 $1499
SAVE $2400

$2999 $1999
SAVE $1000

$1699 $849
SAVE $850

$1698 $1198
SAVE $500

$1149 $849
SAVE $300

$1399 $1049
SAVE $350

$1498 $998
SAVE $500

$2797 $2497
SAVE $300

$280 $230
SAVE $50

$799 $449
SAVE $350

$899 $549
SAVE $350

$420 $170
SAVE $250

$1699 $1149
SAVE $550

OWC Envoy Express

World’s first Thunderbolt 3 M.2 NVME SSD enclosure.

Super fast, bus-powered, 3.3 oz, DIY easy, rugged and compact!


See also OWC Express 4M2
√ No more slow and noisy hard drives!

Browser Hijacking: the WeKnow.ac Malware

I was helping a client with a few issues on her Mac, when I noticed odd behavior in the web browser on her machine. In the space of a few moments, I saw:

  • An “update your Adobe Flash” install popup window (NEVER do this!!!!)
  • Another popup window trying to sell software by scumbags (MacKeeper semi-malware).
  • Two folders containing shell scripts that wrote to /tmp, enable execute permissions and executed some script.
  • Safari was hijacked in a way that prevented setting any home page, and the default page was set to the web site "weknow.ac" (don’t visit it!).

From what I could tell, the problem started from her having clicked on an “Update Flash” prompt that came from an infected website.

Her machine was infected with the WeKnow.ac malware. It does all sort of annoying things but the main thing is that much worse things are likely to result from it via information stealing, redirection to dangerous web sites, etc. This page at macpaw.com has a good how-to remove WeKnow.ac without frequently trying to sell you new software to fix it.

I was able to clean up the mess, but most people will have trouble doing so. There are lots of "how to" cleanup pages, most of which push anti-virus software (which MPG is at best ambivalent on and does not recommend). Don’t panic and find an expert to help you (does Apple help with such stuff?) or research fixit software and the company selling it before buying anything.

Downloading software that purports to remove WeKnow.ac is itself a risk—how would you know that it itself is not malware?! Certainly do not click through any link on a fixit page. Research it separately if you want to use other software to fix it.

Question for Apple: what is wrong with macOS that it allows this kind of well-known longstanding malware to infect a computer?

OWC Accelsior 4M2 PCIe SSD
6000 MB/sec!
Mac or PC.


Ideal for Lightroom, Photoshop, video.
Capacity up to 16TB!
OWC Envoy Pro EX SSD
Blazingly fast Thunderbolt 3 SSD!

Up to 4TB capacity, USB-C compatible.

USB-C model also available


Great for travel or for desktop!
OWC Thunderblade Thunderbolt 3 SSD

Blazing fast, up to 16TB.

YEE HAH!



√ No more slow and noisy hard drives!

Deals Updated Daily at B&H Photo
View all handpicked deals...

Lexar 128GB Professional 2000x UHS-II SDXC Memory Card
$170 $120
SAVE $50

diglloyd.com | Terms of Use | PRIVACY POLICY
Contact | About Lloyd Chambers | Consulting | Photo Tours
Mailing Lists | RSS Feeds | Twitter
Copyright © 2020 diglloyd Inc, all rights reserved.
Display info: __RETINA_INFO_STATUS__