FALSE Virus alert [there is NO malware on your computer]
Jul 21, 2012 | 1:24 pm
#16
Join Date: Jun 2009
Posts: 616
here is the screen shot.
http://i71.photobucket.com/albums/i1..._man/virus.jpg
If you click on the x to close the popup then the " microsoft" warning pops up on a blank screen.
http://i71.photobucket.com/albums/i1..._man/virus.jpg
If you click on the x to close the popup then the " microsoft" warning pops up on a blank screen.
Jul 21, 2012 | 3:15 pm
#17
Join Date: May 2005
Posts: 3,944
This last time, a few minutes ago, the address bar changed to:
[deleted, per ff post]
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
[deleted, per ff post]
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
Last edited by SkeptiCallie; Jul 21, 2012 at 5:06 pm Reason: to avoid clicking on it
Jul 21, 2012 | 5:03 pm
#18
Join Date: Nov 2010
Location: BWI, PHL, IAD
Programs: Marriott LT Titanium; Mileage Plus 1K, 1 MM; Global Entry
Posts: 1,544
This last time, a few minutes ago, the address bar changed to:
http://onlinecleancustodian.pl/550r1...84cb2/pr2/196/
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
http://onlinecleancustodian.pl/550r1...84cb2/pr2/196/
A Google search produced nothing for that entire string, though there is evidently an "onlinecleancustodian.pl" but with other numbers in the last part of the string, and even then only one hit on Google.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.
Jul 21, 2012 | 5:07 pm
#19
Join Date: May 2005
Posts: 3,944
Just got another hit. Pop-up looked the same as the one Polar Man posted earlier today.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.
Norton reported
Category: Intrusion Prevention
An intrusion attempt by delivereravshield.pl was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"delivereravshield.pl (96.44.155.85, 80)”
SkeptiCallie, clicking on the link you posted gets you another hit from the fake virus website. Maybe you could remove the hyperlink in the future? Thanks.
Jul 21, 2012 | 5:17 pm
#20
Join Date: Mar 2004
Location: Florida
Posts: 2,872
I got the same message earlier today as well as yesterday. But it didn't come as a small message box - rather it took over the entire FT page. When I x out, the whole browser window closes and I have to re-open the browser.
It certainly is annoying.
It certainly is annoying.
Jul 21, 2012 | 8:36 pm
#22
Join Date: Jun 2003
Location: Denver CO
Programs: HHonors Gold, National Emerald Club, no airline affinity status
Posts: 3,801
I had similar notice when I have clicked on FT lately. It sets off my Norton saying they blocked an intrusion by "dangerdefenderdata.pl" at the IP address of 96.44.155.85, 80. I see that is the same IP address as previously posted but a different name.
I tried googling dangerdefenderdata.pl but doesn't bring up anything. I was able to trace the IP address to someplace in California.
I tried googling dangerdefenderdata.pl but doesn't bring up anything. I was able to trace the IP address to someplace in California.
Jul 21, 2012 | 9:27 pm
#23
Original Member
Join Date: May 1998
Location: NJ
Posts: 3,343
Same experience as Vulcan. There's no virus of any kind on my machine, but they are somehow taking over and redirecting traffic from the FT site. Redirects the entire page away to a pseudo-virus message, wanting you to clean your computer (and no doubt buy their bogus anti-virus product).
Jul 22, 2012 | 7:03 am
#26
Join Date: Aug 2011
Location: Oklahoma
Programs: Southwest A-List Preferred/Companion Pass, Amtrak Select, Priority Club Platinum, Hilton Diamond
Posts: 453
Jul 22, 2012 | 10:30 am
#28
Join Date: Apr 2004
Location: Scottsdale, AZ
Programs: AA 2MM - UA 1P / Hyatt Diamond - SPG Plat / Hertz 5* - Avis 1st
Posts: 3,933
XP - IE
Vista - IE
W7 - IE
Each of the computers is clean of virus problems. In each instance, the web page is redirected.
This would appear to be an IBB issue.
