This last time, a few minutes ago, the address bar changed to:
[deleted, per ff post]
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
Last edited by SkeptiCallie; Jul 21, 12 at 5:06 pm..
Reason: to avoid clicking on it
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
Just got another hit. Pop-up looked the same as the one Polar Man posted earlier today.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.
Just got another hit. Pop-up looked the same as the one Polar Man posted earlier today.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.
Thanks, glad to do so. I hadn't noticed that that was a hyperlink, just thought I was giving the address for IDing it. If mods need the link again, just PM me and I'll supply it to you. (Michelander, just to be thorough, could you also delete it in your quote of my post, and TIA.)
I got the same message earlier today as well as yesterday. But it didn't come as a small message box - rather it took over the entire FT page. When I x out, the whole browser window closes and I have to re-open the browser.
Programs: HHonors Gold, National Emerald Club, no airline affinity status
Posts: 999
I had similar notice when I have clicked on FT lately. It sets off my Norton saying they blocked an intrusion by "dangerdefenderdata.pl" at the IP address of 96.44.155.85, 80. I see that is the same IP address as previously posted but a different name.
I tried googling dangerdefenderdata.pl but doesn't bring up anything. I was able to trace the IP address to someplace in California.
__________________
Insert witty quote or website here ---->
Same experience as Vulcan. There's no virus of any kind on my machine, but they are somehow taking over and redirecting traffic from the FT site. Redirects the entire page away to a pseudo-virus message, wanting you to clean your computer (and no doubt buy their bogus anti-virus product).
__________________
There's a new sheriff in town.
Djlawman
I've been seeing the same problem for several days, only when I visit FT.
Me too, only on Flyertalk. Can browse for hours, the minute I come here it sticks on the virus warning. Only on PC, I'm using my iPad now with no problem.
Programs: AA 2MM - UA 1P / Hyatt Diamond - SPG Plat / Hertz 5* - Avis 1st
Posts: 2,464
Quote:
Originally Posted by Flyingmama
I got the same message earlier today as well as yesterday. But it didn't come as a small message box - rather it took over the entire FT page. When I x out, the whole browser window closes and I have to re-open the browser.
It certainly is annoying.
I have now had this exact same experience on three separate computers in three separate locations.
XP - IE
Vista - IE
W7 - IE
Each of the computers is clean of virus problems. In each instance, the web page is redirected.
