Originally Posted by
SkeptiCallie
This last time, a few minutes ago, the address bar changed to:
http://onlinecleancustodian.pl/550r1...84cb2/pr2/196/
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
Just got another hit. Pop-up looked the same as the one
Polar Man posted earlier today.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.