FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Technical Support and Feedback (https://www.flyertalk.com/forum/technical-support-feedback-386/)
-   -   FALSE Virus alert [there is NO malware on your computer] (https://www.flyertalk.com/forum/technical-support-feedback/1368367-false-virus-alert-there-no-malware-your-computer.html)

username Jul 23, 2012 12:11 am

I have encountered too. It seems to me that this happens if my mouse is in the wrong place at the wrong time. It seems the mouse triggers some action which brings up the site. This always happens when the page is loading.

No log entries in Norton.

What is one supposed to do and not do when this happens? I guess clicking that OK on the dialogue box would be a bad idea, right?

Thanks.

wrp96 Jul 23, 2012 12:20 am


Originally Posted by username (Post 18983319)
I have encountered too. It seems to me that this happens if my mouse is in the wrong place at the wrong time. It seems the mouse triggers some action which brings up the site. This always happens when the page is loading.

No log entries in Norton.

What is one supposed to do and not do when this happens? I guess clicking that OK on the dialogue box would be a bad idea, right?

Thanks.

Definitely never click on the OK. Best thing to do is to go into task manager and shut down the window.

username Jul 23, 2012 1:00 am

I am now getting jetcomp.exe Application errors. Running NAV full scan now but I almost thinkg Norton might not know anything about this...

Flyingmama Jul 23, 2012 11:13 am

Just happened again. Anyone know how to make this thing stop?

Michilander Jul 23, 2012 11:56 am


Originally Posted by username (Post 18983319)
I have encountered too. It seems to me that this happens if my mouse is in the wrong place at the wrong time. It seems the mouse triggers some action which brings up the site. This always happens when the page is loading.

No log entries in Norton.

What is one supposed to do and not do when this happens? I guess clicking that OK on the dialogue box would be a bad idea, right?

Thanks.


Originally Posted by username (Post 18983456)
I am now getting jetcomp.exe Application errors. Running NAV full scan now but I almost thinkg Norton might not know anything about this...

I think the best thing to do is to disconnect from the network before you click on anything. Then close the window before restarting the network (personnally, I also run a quick scan wth Norton before reconnecting). Clicking on OK while connected to the network will almost surely result in an attempt to install a virus or trojan on you computer.

I do get a log entry in Norton for every one of these and I get a pop-up alert saying it stopped an attack. Even posted a couple of partial log entires earlier in the thread. Every scan I have run for this problem has come back clean.

IBobi Jul 23, 2012 12:03 pm

Thank you all for reporting this; we're looking into it and we'll update as soon as we have any information, though a thorough scan of FlyerTalk last week revealed no cause for alarm.

Paul

IBobi Jul 23, 2012 12:45 pm

Hi all,

We are working to see where this "virus" message is coming from.

You can help us by capturing a FULL PAGE screenshot (to get the ads in the shot as well) and posting it here or emailing it to me at paul.obrien (at) internetbrands.com.

If someone can also right-click on the page and copy & paste the View Page Source information, that'd be helpful. Since this is an intermittent issue that is affecting only a small percentage of users, it's difficult for us to replicate & trace.

Thank you,

Paul

uk1 Jul 23, 2012 12:54 pm

Several times ...IE with W7 picked up by Norton.

cblaisd Jul 23, 2012 1:48 pm

You've got mail.

This is a particularly nasty one.


Originally Posted by IBobi (Post 18986750)
Hi all,

We are working to see where this "virus" message is coming from.

You can help us by capturing a FULL PAGE screenshot (to get the ads in the shot as well) and posting it here or emailing it to me at paul.obrien (at) internetbrands.com.

If someone can also right-click on the page and copy & paste the View Page Source information, that'd be helpful. Since this is an intermittent issue that is affecting only a small percentage of users, it's difficult for us to replicate & trace.

Thank you,

Paul


SkeptiCallie Jul 23, 2012 3:38 pm


Originally Posted by cblaisd (Post 18987163)
[snip]

This is a particularly nasty one.

Could you explain? Is there a possibility that we might have virus infections that might be difficult to detect?

SkeptiCallie Jul 23, 2012 5:18 pm

I Googled the words,

"You need to clean your computer to prevent the system crash"

and I got a number of hits. From one of those websites, I gathered that the first might attempt to install a Trojan called "Windows ProSecurity Scanner." I Googled that term also and found a lot of hits re how to remove it if infected.

That's just FYI, to illustrate that this matter has been around awhile before it ever hit FT. I'd be afraid of the websites that offer to remove the alleged Trojan as well as the alleged Trojan threat. But my point is that there is some information out there evidently.

trekker954 Jul 23, 2012 5:53 pm


Originally Posted by Polar Man (Post 18966223)
Twice in the last two days while using FT i have had a pop up appear. It is designed to make it look like MS security essentials notice.

http://i5.photobucket.com/albums/y193/Braybuddy/MS.jpg

i have gotten it also, and last month as well. i thought i had gotten it off, but then when I signed onto flyertalk again. its definetly in this program. what a pain.

trekker954 Jul 23, 2012 5:58 pm

Is this popup coming up on any flyer talk thread? I normally only go onto American, One world or Marriott theads.

Michilander Jul 23, 2012 7:02 pm


Originally Posted by trekker954 (Post 18988653)
Is this popup coming up on any flyer talk thread? I normally only go onto American, One world or Marriott theads.

That's a thought. Maybe it can be tracked to a specific forum. Although, this thing only hits me when I first click on MyFlyerTalk, not when I go to a forum.

Still, of the list above the only one I subscribe to is Marriott.

Michilander Jul 23, 2012 7:05 pm


Originally Posted by IBobi (Post 18986750)
Hi all,

We are working to see where this "virus" message is coming from.

You can help us by capturing a FULL PAGE screenshot (to get the ads in the shot as well) and posting it here or emailing it to me at paul.obrien (at) internetbrands.com.

If someone can also right-click on the page and copy & paste the View Page Source information, that'd be helpful. Since this is an intermittent issue that is affecting only a small percentage of users, it's difficult for us to replicate & trace.

Thank you,

Paul

Paul,

I would be willing to do this, but when I get hit the page goes blank and I just get the popup. Will grab the source the next time, but I suspect it will not be the FT source.

username Jul 23, 2012 8:53 pm


Originally Posted by Michilander (Post 18986416)
I do get a log entry in Norton for every one of these and I get a pop-up alert saying it stopped an attack. Even posted a couple of partial log entires earlier in the thread. Every scan I have run for this problem has come back clean.

Strange, my Norton never picked this up (and it is up-to-date). I did run a full scan last night and it came back clean. Still, I keep getting that JETCOMP error which I am pretty sure is related to this. I guess no banking from this computer for a while...

Thomas Hudson Jul 23, 2012 10:37 pm

Been happening to me as well the last few days... same one as everyone else is seeing... usually happens first time I jump on the site whilst surfing..

Frenchie Flyer Jul 23, 2012 10:48 pm

Happened to me as well tonight. Only on Flyertalk.

jamesteroh Jul 24, 2012 7:51 am

Happened to me a few times as well since Sunday both on my home laptop and work PC which have different virus detection programs. And it's only when I access flyertalk. Sometimes it happens as soon as I go to flyertalk and today it happened after being on the site a while after I posted a message. The only way to get out of it is to open the task manager and shut IE down.

It doesn't happen on my IPAD though.

HawaiiTrvlr Jul 24, 2012 8:08 am

I got the virus alert twice yesterday and once again this morning. It is always from the same IP address but the website changes. This morning's website was "performancetestprevention.pl" It seems when I go from one website (like a news website) to FT. I use Windows IE 7. I am just glad I Norton to protect me.

747_not_777 Jul 24, 2012 8:44 am

So glad I found this thread as I am getting this to (in the UK) - only when using IE, and only when logged in to my account. Both home and work PCs, and bother have been scanned with different up to date software and reveal no viruses on my machine.

SkeptiCallie Jul 24, 2012 8:54 am

I get it (1) only when on IE, not Chrome; (2) whether signed in or not, makes no difference; and (3) when clicking on several FT forums, including this one and including OMNI, also the "Dining" forum in "Travel & Dining."

So for me, the two consistent factors are IE browser and FT website.

Out of my Element Jul 24, 2012 10:41 am

I get it:

Only on IE
Only when I'm clicking on the "Americas-USA" forum

When I click the Back Button, it asks me if I really want to go there without cleaning my computer, I tell it OK, and I surf like normal.

Seems to come up just once a day for me.

Might have fallen for it but for the bad grammer.

Tech1 Jul 24, 2012 10:59 am

Suffered from the not able to connect with facebook issue and tried IE to see if it would help. Immediately got this issue - so second on not happening on chrome, only on IE.

Wilbur Jul 24, 2012 11:53 am


Originally Posted by Tech2 (Post 18992843)
Suffered from the not able to connect with facebook issue and tried IE to see if it would help. Immediately got this issue - so second on not happening on chrome, only on IE.

Still happening this week, still only on IE, not chrome.

Any chance of IBB getting this fixed?

I am not used to having FT be such a chancy destination.

SkiAdcock Jul 24, 2012 12:21 pm

I received it this morning again. I typed flyertalk.com & the home page came up/didn't have time to log in to my flyertalk before the virus screen came up.

I'm on IE.

Cheers.

brownnet Jul 24, 2012 12:38 pm

Had the virus warning twice in the past week on IE when browsing the Alaska Airlines forum.

AlohaDaveKennedy Jul 24, 2012 12:41 pm

Ditto - IE browser and FT website. Houston we have a problem.

Kill IE from the Task Manager when the message appears.

g-didi Jul 24, 2012 1:57 pm

Had this problem again today again using flyertalk.com/forums (IE)stored in my bookmarks. I have not had the virus alert going forum to forum.

I dont even see the Flyertalk banner load and I get the virus alert. The screen comes up white with the alert - no ads were clicked. It looks exactly like the pic I posted earlier in the thread. (I dont know how to do a full screenshot. Sorry.)

Today the address in the bar is some place . pl again. I tried right clicking and nothing happens so could no provide you the page source info requested.

Task Manager used to close the page. Task manager actually shows Flyertalk running and the IE page with virus alert running although I dont actually have a visible page of Flyertalk.

Ran malware and virus protection software. Always comes up clean.

Must say this is getting annoying. Makes me have second thoughts when I think about coming here - dont want to risk a virus/trojan etc.

exilencfc Jul 24, 2012 2:02 pm

I've had it too - on travelbuzz and BAEC. I'm another IE user

Scots_Al Jul 24, 2012 3:48 pm

Me too. First at the weekend (can't remember exactly what I clicked on, but I was logged in). Recognised it for what it was, ctrl+alt+escaped out of it. Ran full scan on computer - nothing.

All fine until 10 minutes ago - not logged in, it popped up when I clicked on a thread in the BA forum from the front page. I'm using IE and Vista. Came here to report it, and found this thread...

Often browse FT on iPhone, and have not had anything similar. Nothing similar on other sites.

Jaimito Cartero Jul 24, 2012 3:54 pm

Seems IE is much of the problem.

Flyingmama Jul 24, 2012 4:08 pm

Just happened again when I went from the home page to the forums page. The culprit in my case appears to be: http://lowanalysisthreat.pl/o1y0bx4o...84cb2/pr2/196/

PotNoodle Jul 24, 2012 4:45 pm

I also have this problem.

I am extremely concerned. My anti-virus software kicks me off the entire site with big alert messages.

PotNoodle Jul 24, 2012 4:52 pm

I only ever experience it on the Executive Club, although most of my time is spent there.

Has a corrupt moderator added viruses to the site, or is it some dodgy advertisement?

I am hoping an over protective anti-virus software is to blame, but I don't know what to do!!

ExitRowAisle Jul 24, 2012 4:57 pm

Hopefully this gets fixed on a more timely basis than the powerpint.net warnings I had to endure for months on end.

knwl9 Jul 24, 2012 5:05 pm

have run a debug on the page, script has a bug at line 128 the link the virus is going to is shown on this site

http://urlquery.net/report.php?id=101136

everyone search your comp for snort then delete

this is part of line 128 FB.provide('Edgar',{injectStubs:function(){functio n

Object doesn't support this property or method FeatureLoader.js.php, line 128 character 188

knwl9 Jul 24, 2012 5:12 pm

anyone who gets this virus alert all you have to do is use your back button to gat away from the false page

dioxide45 Jul 24, 2012 7:36 pm

Here ar some screen shots. No adds are visible. The page redirects to the virus alert before FlyerTalk banner or adds appear.
http://i524.photobucket.com/albums/c...ioxide45/1.jpg

When you click the X to close, the next screen appears.
http://i524.photobucket.com/albums/c...ioxide45/2.jpg

When you click the red X to close, the first screen pops up again.

If you do a right click / close on Internet Explorer on the task bar, you get this message.
http://i524.photobucket.com/albums/c...ioxide45/3.jpg

Trying to kill it through Task manager causes the same popup, but it does eventually close.

missamo80 Jul 24, 2012 10:50 pm

FWIW, I've had the exact same thing twice in the last couple of days.

Neil


All times are GMT -6. The time now is 2:11 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.