FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Technical Support and Feedback (https://www.flyertalk.com/forum/technical-support-feedback-386/)
-   -   FALSE Virus alert [there is NO malware on your computer] (https://www.flyertalk.com/forum/technical-support-feedback/1368367-false-virus-alert-there-no-malware-your-computer.html)

spd476 Jul 21, 2012 1:24 pm


Originally Posted by Polar Man (Post 18974472)
here is the screen shot.

http://i71.photobucket.com/albums/i1..._man/virus.jpg

If you click on the x to close the popup then the " microsoft" warning pops up on a blank screen.

I've got the same thing in the last couple of days on different computers.

SkeptiCallie Jul 21, 2012 3:15 pm

This last time, a few minutes ago, the address bar changed to:

[deleted, per ff post]

A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.

Michilander Jul 21, 2012 5:03 pm


Originally Posted by SkeptiCallie (Post 18976047)
This last time, a few minutes ago, the address bar changed to:

http://onlinecleancustodian.pl/550r1...84cb2/pr2/196/

A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.

Just got another hit. Pop-up looked the same as the one Polar Man posted earlier today.

Norton reported

Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”

SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.

SkeptiCallie Jul 21, 2012 5:07 pm


Originally Posted by Michilander (Post 18976490)
Just got another hit. Pop-up looked the same as the one Polar Man posted earlier today.

Norton reported

Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”

SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.

Thanks, glad to do so. I hadn't noticed that that was a hyperlink, just thought I was giving the address for IDing it. If mods need the link again, just PM me and I'll supply it to you. (Michelander, just to be thorough, could you also delete it in your quote of my post, and TIA.)

Flyingmama Jul 21, 2012 5:17 pm

I got the same message earlier today as well as yesterday. But it didn't come as a small message box - rather it took over the entire FT page. When I x out, the whole browser window closes and I have to re-open the browser.

It certainly is annoying.

Vulcan Jul 21, 2012 6:31 pm

I received the same message about 2 hours ago. I closed it and ran SuperAntiSpyware and it came up clean.

HawaiiTrvlr Jul 21, 2012 8:36 pm

I had similar notice when I have clicked on FT lately. It sets off my Norton saying they blocked an intrusion by "dangerdefenderdata.pl" at the IP address of 96.44.155.85, 80. I see that is the same IP address as previously posted but a different name.

I tried googling dangerdefenderdata.pl but doesn't bring up anything. I was able to trace the IP address to someplace in California.

Djlawman Jul 21, 2012 9:27 pm

Same experience as Vulcan. There's no virus of any kind on my machine, but they are somehow taking over and redirecting traffic from the FT site. Redirects the entire page away to a pseudo-virus message, wanting you to clean your computer (and no doubt buy their bogus anti-virus product).

duluthDL Jul 21, 2012 11:21 pm

I've been seeing the same problem for several days, only when I visit FT.

Jaimito Cartero Jul 21, 2012 11:35 pm

I don't get it in Safari or Chrome.

Paddlenpedal Jul 22, 2012 7:03 am


Originally Posted by duluthDL (Post 18977717)
I've been seeing the same problem for several days, only when I visit FT.

Me too, only on Flyertalk. Can browse for hours, the minute I come here it sticks on the virus warning. Only on PC, I'm using my iPad now with no problem.

Flyingmama Jul 22, 2012 7:16 am

Just happened again. Whatever the issue is, it hasn't been fixed.

Wilbur Jul 22, 2012 10:30 am


Originally Posted by Flyingmama (Post 18976553)
I got the same message earlier today as well as yesterday. But it didn't come as a small message box - rather it took over the entire FT page. When I x out, the whole browser window closes and I have to re-open the browser.

It certainly is annoying.

I have now had this exact same experience on three separate computers in three separate locations.

XP - IE
Vista - IE
W7 - IE

Each of the computers is clean of virus problems. In each instance, the web page is redirected.

This would appear to be an IBB issue.

xenole Jul 22, 2012 2:14 pm

Same here. Once a day, last time about a minute ago.

tcook052 Jul 22, 2012 2:28 pm


Originally Posted by xenole (Post 18980719)
Same here. Once a day, last time about a minute ago.

Me too and that's now 3 or 4 times on different computers at home & work.


All times are GMT -6. The time now is 1:27 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.