FALSE Virus alert [there is NO malware on your computer]
Jul 24, 2012 | 5:05 pm
#77
Join Date: Apr 2012
Posts: 20
have run a debug on the page, script has a bug at line 128 the link the virus is going to is shown on this site
http://urlquery.net/report.php?id=101136
everyone search your comp for snort then delete
this is part of line 128 FB.provide('Edgar',{injectStubs:function(){functio n
Object doesn't support this property or method FeatureLoader.js.php, line 128 character 188
http://urlquery.net/report.php?id=101136
everyone search your comp for snort then delete
this is part of line 128 FB.provide('Edgar',{injectStubs:function(){functio n
Object doesn't support this property or method FeatureLoader.js.php, line 128 character 188
Last edited by knwl9; Jul 24, 2012 at 5:10 pm
Jul 24, 2012 | 7:36 pm
#79
Join Date: Apr 2006
Posts: 526
Here ar some screen shots. No adds are visible. The page redirects to the virus alert before FlyerTalk banner or adds appear.
When you click the X to close, the next screen appears.
When you click the red X to close, the first screen pops up again.
If you do a right click / close on Internet Explorer on the task bar, you get this message.
Trying to kill it through Task manager causes the same popup, but it does eventually close.
When you click the X to close, the next screen appears.
When you click the red X to close, the first screen pops up again.
If you do a right click / close on Internet Explorer on the task bar, you get this message.
Trying to kill it through Task manager causes the same popup, but it does eventually close.
Jul 25, 2012 | 3:45 am
#81
FlyerTalk Evangelist
Join Date: Feb 2003
Location: Greener Pastures
Posts: 10,515
http://debuggertestingprevention.pl/...84cb2/pr2/196/
Jul 25, 2012 | 6:24 am
#83
Join Date: Jul 2012
Posts: 21
Just happened again when I went from the home page to the forums page. The culprit in my case appears to be: http://lowanalysisthreat.pl/o1y0bx4o...84cb2/pr2/196/
Jul 25, 2012 | 7:04 am
#84
Join Date: May 2005
Posts: 3,944
I've mostly switched to Chrome for FT as a result. I went back to IE a few minutes ago to test using "back" per earlier poster. For me it didn't work. In using IE, I got the virus screen about two seconds after navigating in FT, so I tried the "backspace" on the keyboard. That didn't close out the virus screen. So I tried the left arrow to navigate out, per post 78 (which I might not have understood), but that didn't work either. Tried the left arrow in combination with other keys, and that also didn't work. What did work for me was right-clicking on the bottom bar on the screen, then clicking on "Task Manager" (which I have now become aware of, thanks to this thread 
) and ending the task. That worked. But I still wondered about residual effects, so I just shut the computer down and started over with Chrome.
What I am wondering about is whether the virus screen will lead to any viruses or other malware being installed on our computers. When the technical people at IB find an answer to what is causing the screen appearing, I hope they will let us know what we should be aware of in terms of that possibility. Not everyone uses virus protection over and above that which is already provided by their OS, as for some people,a lot of it doesn't work well with their computers, and for those who do, not every virus protection program screens against all malware. So it would be good to know which virus protection program is effective against this thing, if indeed it is successful in installing itself on some computers.
Maybe I am concerned too soon. Hope so.
) and ending the task. That worked. But I still wondered about residual effects, so I just shut the computer down and started over with Chrome.What I am wondering about is whether the virus screen will lead to any viruses or other malware being installed on our computers. When the technical people at IB find an answer to what is causing the screen appearing, I hope they will let us know what we should be aware of in terms of that possibility. Not everyone uses virus protection over and above that which is already provided by their OS, as for some people,a lot of it doesn't work well with their computers, and for those who do, not every virus protection program screens against all malware. So it would be good to know which virus protection program is effective against this thing, if indeed it is successful in installing itself on some computers.
Maybe I am concerned too soon. Hope so.
Jul 25, 2012 | 10:45 am
#85
Join Date: Aug 2010
Location: Formerly Box 350, Boston Mass, Oh two one three four. Now near Beverly Hills 90210
Programs: Loyal Order of Water Buffalos
Posts: 4,371
Jul 25, 2012 | 10:50 am
#86
Join Date: Oct 2007
Posts: 237
Important message to forum administrators
Several times over the last few days I have accessed this [BA Executive Club] forum and have then been automatically redirected to a different page, for instance this one
http://testscanningtasks.pl/690zm52/...84cb2/pr2/196/ (do NOT click on any dialog on the page if you view this, close your browser window).
This page, or similar pages have indicated that Microsoft Security Essentials or McAfee security "has scanned my machine and found that it is infected".
Now, I work for McAfee and know that no such thing has happened.
This is what is known as a malvertisement and or "fake AV" and it is a scam, as my machine is NOT infected. The way the scam works is it says your machine is infected and if you pay a fee it will clean your machine. After you pay, hey presto! you're told your machine is clean, when it likely was all along. It does not clean anything.
You may want to look into who is generating these advertisements on your web site before it gives you a bad name through association.
http://testscanningtasks.pl/690zm52/...84cb2/pr2/196/ (do NOT click on any dialog on the page if you view this, close your browser window).
This page, or similar pages have indicated that Microsoft Security Essentials or McAfee security "has scanned my machine and found that it is infected".
Now, I work for McAfee and know that no such thing has happened.
This is what is known as a malvertisement and or "fake AV" and it is a scam, as my machine is NOT infected. The way the scam works is it says your machine is infected and if you pay a fee it will clean your machine. After you pay, hey presto! you're told your machine is clean, when it likely was all along. It does not clean anything.
You may want to look into who is generating these advertisements on your web site before it gives you a bad name through association.
Last edited by Prospero; Jul 25, 2012 at 10:55 am
