FALSE Virus alert [there is NO malware on your computer]
Jul 25, 2012, 10:57 am
#92
Join Date: Jan 2005
Location: AMS
Programs: Flying Blue Gold
Posts: 1,849
See also discussion in Technical Issues: http://www.flyertalk.com/forum/techn...rus-alert.html
Jul 25, 2012, 10:59 am
#93
Join Date: Apr 2005
Location: Scotland
Programs: not a lot
Posts: 1,774
I am getting this to.
Looks like one of your ad's is a bit dodgy. I've seen similar happen on other forums in the past as well.
You should really look at shutting down the offending provider as some less tech savvy people might install the rubbish that is offered.
Looks like one of your ad's is a bit dodgy. I've seen similar happen on other forums in the past as well.
You should really look at shutting down the offending provider as some less tech savvy people might install the rubbish that is offered.
Jul 25, 2012, 11:02 am
#94
Join Date: Oct 2007
Posts: 237
I don't see this from other sites. I do not believe my DNS is polluted.
I suspect what is happening is that genuine adverts are shown for the majority of the time but occasionally (randomly) a "bad" one is shown, making it harder to track down who is serving these up.
I suspect what is happening is that genuine adverts are shown for the majority of the time but occasionally (randomly) a "bad" one is shown, making it harder to track down who is serving these up.
Jul 25, 2012, 11:15 am
#95
Join Date: Apr 2004
Location: Scottsdale, AZ
Programs: AA 2MM - UA 1P / Hyatt Diamond - SPG Plat / Hertz 5* - Avis 1st
Posts: 3,886
Any progress?
OK, so it has now been a week since this first started happening, and five days or so since it was reported to IBB.
Today, on the fifth or sixth computer (I am losing count) it happened again. Since most elite FF lounges use Windows and IE, this means that most anyone who is in a lounge and using the box provided by the lounge will likely encounter the virus.
Has there been any progress on fixing the FT site security and/or ridding FT of the culprit ads?
Today, on the fifth or sixth computer (I am losing count) it happened again. Since most elite FF lounges use Windows and IE, this means that most anyone who is in a lounge and using the box provided by the lounge will likely encounter the virus.
Has there been any progress on fixing the FT site security and/or ridding FT of the culprit ads?
Jul 25, 2012, 11:32 am
#96
Join Date: May 2005
Location: Chicago Area
Posts: 369
Still happening to me. I would suggest that a statement about this problem be made on the main Flyertalk page and perhaps each of the forums. It took me awhile to find this forum and I would think all the members would need to know about this. I would also politely ask the administrators to let us know what is going on.
Jul 25, 2012, 11:33 am
#97
No longer with Internet Brands
Join Date: Mar 2011
Location: Los Angeles, CA
Programs: DL DM 1.6MM, Marriott LT Plat
Posts: 5,343
Merged a thread with the existing one on this issue to avoid messaging duplication.
We're working to determine which ad is causing this messaging to occur. This kind of advertising is *not* approved by FT, and will immediately be blocked when it is located. Meanwhile, be assured that despite the message it shows you, you do not have a virus (from this) and FT is not infected. This is an advertisement that appears to be exploiting a hole in Internet Explorer to show a false virus alert.
One way to avoid it is to switch browsers to Chrome or Firefox.
I'll update as soon as I have new information; thank you for hanging in there with us while we resolve this.
Paul
We're working to determine which ad is causing this messaging to occur. This kind of advertising is *not* approved by FT, and will immediately be blocked when it is located. Meanwhile, be assured that despite the message it shows you, you do not have a virus (from this) and FT is not infected. This is an advertisement that appears to be exploiting a hole in Internet Explorer to show a false virus alert.
One way to avoid it is to switch browsers to Chrome or Firefox.
I'll update as soon as I have new information; thank you for hanging in there with us while we resolve this.
Paul
Jul 25, 2012, 11:57 am
#98
Join Date: May 2005
Location: Near Lichfield, UK
Programs: BMI DC Gold, BA Gold, LH SEN, Priority Club Platinum, Nectar purple
Posts: 949
I've had this too, on a number of different computers, at different locations.
If it's any help (and sorry if someone has already posted this), the internet address that it points to when I get the virus message is:
http://performancecaredetector.pl followed by a load of numbers.
I agree with the earlier poster who suggested it should be highlighted on each of the forums.
If it's any help (and sorry if someone has already posted this), the internet address that it points to when I get the virus message is:
http://performancecaredetector.pl followed by a load of numbers.
I agree with the earlier poster who suggested it should be highlighted on each of the forums.
Jul 25, 2012, 3:14 pm
#100
Join Date: Nov 2010
Location: BWI, PHL, IAD
Programs: Marriott LT Titanium; Mileage Plus 1K, 1 MM; Global Entry
Posts: 1,516
I've mostly switched to Chrome for FT as a result. I went back to IE a few minutes ago to test using "back" per earlier poster. For me it didn't work. In using IE, I got the virus screen about two seconds after navigating in FT, so I tried the "backspace" on the keyboard. That didn't close out the virus screen. So I tried the left arrow to navigate out, per post 78 (which I might not have understood), but that didn't work either. Tried the left arrow in combination with other keys, and that also didn't work. What did work for me was right-clicking on the bottom bar on the screen, then clicking on "Task Manager" (which I have now become aware of, thanks to this thread 
) and ending the task. That worked. But I still wondered about residual effects, so I just shut the computer down and started over with Chrome.
What I am wondering about is whether the virus screen will lead to any viruses or other malware being installed on our computers. When the technical people at IB find an answer to what is causing the screen appearing, I hope they will let us know what we should be aware of in terms of that possibility. Not everyone uses virus protection over and above that which is already provided by their OS, as for some people,a lot of it doesn't work well with their computers, and for those who do, not every virus protection program screens against all malware. So it would be good to know which virus protection program is effective against this thing, if indeed it is successful in installing itself on some computers.
Maybe I am concerned too soon. Hope so.
) and ending the task. That worked. But I still wondered about residual effects, so I just shut the computer down and started over with Chrome.What I am wondering about is whether the virus screen will lead to any viruses or other malware being installed on our computers. When the technical people at IB find an answer to what is causing the screen appearing, I hope they will let us know what we should be aware of in terms of that possibility. Not everyone uses virus protection over and above that which is already provided by their OS, as for some people,a lot of it doesn't work well with their computers, and for those who do, not every virus protection program screens against all malware. So it would be good to know which virus protection program is effective against this thing, if indeed it is successful in installing itself on some computers.
Maybe I am concerned too soon. Hope so.
Some of these links are just trying to sell you bogus AV software, some are trying to install a virus or trojan. It does appear to be a well known exploit, though, and as long as you have reputable, up-to-date AV software and you don't click on any of the buttons on the pop-up, you should be fine. If you are really concerned and use Norton, you can always run Power Eraser from the Norton site. Other vendors may have similar products. Norton has told me it blocked access every time I have gotten the pop-up.
Jul 25, 2012, 4:12 pm
#101
Join Date: May 2005
Posts: 3,944
I had already done that on several occasions, and it never worked. So I had assumed that knwl9 had meant something different, but those methods didn't work either. Thanks, however. I have just switched to using Chrome and am waiting to see if I need to check for a virus, but assume that this is just a rogue ad.
Jul 25, 2012, 7:21 pm
#103
Join Date: Jul 2007
Programs: DL DM, 2MM
Posts: 243
I had run the real MSE earlier today and found Rogue:JS/FakePAV; I thought this might be the problem. But I removed it and the FT problem came up again later in the day. I ran MSE again and there were no alerts, so according to MSE, there's no problem with the computer.
Jul 25, 2012, 7:41 pm
#104
Join Date: Apr 2003
Location: Seattle, Wash. USA
Posts: 1,531
You really need to get a handle on this. I'm starting to avoid FT because it's becoming a hassle to always fire up Task Manager to nuke the browser, just to make that idiotic (whoever wrote it can't spell) message go away.
Jul 26, 2012, 2:15 am
#105
Join Date: Apr 2005
Location: Scotland
Programs: not a lot
Posts: 1,774
Ideally, if the FT admins cannot work it out by the information being supplied then they need to leave each feed off for a couple of days and ask if the problem has stopped. Once the offending feed has been located then it's a case of working with the ad provider to locate the exact ad.
I'm going to configure an ad blocker to block all adverts from FT now to see if that makes the problem go away for me.