Virus on FT?
 

I know this sounds strange, but I only had one browser open with FT and my virus scan was going crazy ... took me a couple of minutes to clean the mess. I was in the NW forum and it found Exploit MS06-006 in a file movie[1].qtl

I am right now using the wireless network @ PDX airport, which might be part of the issue, but I thought I better post this ...

yes, I have received a virus warning from FT using two different computers, One with McAfee and the other with NortonAV.

FT opened with Avast! finding a virus. Annoying.

Just today I've started encounter viruses targetting the MS06-014 vulnerability on Flyertalk. Seems to be coming from the bottom of page adds.

happening again to me now in MSP .... someone needs to fix this

Sounds like one of the ad purveyors got infected. I've got FF + ......., so I'm not having the issue.

I would bet the latest posts in this thread ate the same issue.

I just got an attack (Sun 10/07 10:00 am CDT). IE7 showed a warning bar that the page was trying to run an add-on Microsoft Outlook, and a popup prompt to install an ActiveX.

Here's what Norton AntiVirus reported.

Details: Attempted Intrusion "HTTP Quicktime RTSP URI BO" against your machine was detected and blocked.
Intruder: 80.93.56.229(http(80)).
Risk Level: High.
Protocol: TCP.
Attacked IP: <my manchine name>.
Attacked Port: 1640.

here's what my Avast reported when I opened Flyertalk with Firefox:

Virus Source: [urld]http://80.93.48.89/weriyuicewrtret/[/urld]
Malware: JS:Agent-Q [Trj]
Type: Trojan Horse
Avast VPS database: 000778-5, 10/06/2007

I git infected with "Internet Speed Monitor" yesterday & again today. This is with only FT open. Can somebody get to the root of this?

Also, Randy, can you dump the annoying "you're the xxxx winner" banner ads? Very annoying!

Alter your hosts file to add the following lines and you'll get rid of 99% of the ads...

127.0.0.1 tribalfusion.com
127.0.0.1 a.tribalfusion.com
127.0.0.1 speedera.net
127.0.0.1 tribalfusion.speedera.net
127.0.0.1 pagead2.googlesyndication.com

Randy no longer has control of the FT ad... Internet Brands does :td: :td: :td:

This is the same one that my AV and Webroot found.......This sucks big time:mad:

The porn pop-ups are bad enough....but a virus is something else.

Please get this crap off FT!!!:td:

:rolleyes: I hope he has some say when it gets to virus attacks on FT members :rolleyes:

I'm getting intrusion attempts too. Getting prompts to allow an active x to run to allow remote control.

Likewise with the add on. Could this have something to do with why the site is running REALLY slow?

We just wanted to chime in here and thank you all for the tremendous information you've been providing. We're obviously intently focused at the moment on finding out what is causing this issue and expect to have it resolved as quickly as possible.