# Anyone else getting fake anti-virus errors?
**URL:** https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020
**Category:** About This Message Board
**Created:** [March 2, 2010, 6:29pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020 "2010-03-02T18:29:59Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@Saint\_Cad](https://boards.straightdope.com/u/Saint_Cad)
#### Post date: [March 2, 2010, 6:29pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/1 "2010-03-02T18:29:59Z")
Off and on for the last two days, I’ve gotten this website blocked from my anti-virus software (symentec on 2 machines and norton on 1) saying it has detected a fake anti-virus install and the website that comes up on the menu bar is just the IP address (starts out 94 IIRC). A scan at home didn’t pick up a virus on that machine.
Is the SD suffering from an intermittant hijacker?
---
### Author:  [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)
#### Post date: [March 2, 2010, 6:39pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/2 "2010-03-02T18:39:05Z")
No warning from AVG.
---
### Author:  [@The\_Falling\_Reverend](https://boards.straightdope.com/u/The_Falling_Reverend)
#### Post date: [March 2, 2010, 6:48pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/3 "2010-03-02T18:48:56Z")
I got it a few weeks ago while surfing on this site. The fake anti-virus program wasn’t picked up by any of my anti-virus/malware programs. I had to do a system restore. Thankfully I didn’t lose anything.
---
### Author:  [@Dallas\_Jones](https://boards.straightdope.com/u/Dallas_Jones)
#### Post date: [March 2, 2010, 6:56pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/4 "2010-03-02T18:56:12Z")
Yes, my Norton caught the same thing as soon as I went to the SDMB this morning at 10:18 Pacific time.
Attacking computer: 94.23.72.47,80 Attacking url: 94.23.72.47/hitin.php? land=20&affid=93101
Threat name: HTTP Fake Antivirus Install Request
---
### Author:  [@Drunky\_Smurf](https://boards.straightdope.com/u/Drunky_Smurf)
#### Post date: [March 2, 2010, 7:20pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/5 "2010-03-02T19:20:35Z")
I got that too last night around 6:30PM.
---
### Author:  [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)
#### Post date: [March 2, 2010, 7:23pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/6 "2010-03-02T19:23:52Z")
I’ll pass this on to Ed.
---
### Author:  [@pravnik](https://boards.straightdope.com/u/pravnik)
#### Post date: [March 2, 2010, 7:35pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/7 "2010-03-02T19:35:20Z")
I also got it, before I got the chance to log on.
---
### Author:  [@HeyHomie](https://boards.straightdope.com/u/HeyHomie)
#### Post date: [March 2, 2010, 7:35pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/8 "2010-03-02T19:35:21Z")
Happened at home this morning, at work about four minutes ago.
---
### Author:  [@Irishman](https://boards.straightdope.com/u/Irishman)
#### Post date: [March 2, 2010, 8:16pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/9 "2010-03-02T20:16:28Z")
Got it from home computer. Clicked on link for “About This Message Board” and McAfee lit up. Clicked “go to site anyway” and got a web browser page that imitated a computer folder and displayed it was running a virus check. I backed out quick and am running a full scan using McAfee.
---
### Author:  [@Idle\_Thoughts](https://boards.straightdope.com/u/Idle_Thoughts)
#### Post date: [March 2, 2010, 8:24pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/10 "2010-03-02T20:24:38Z")
Yes, I got it yesterday
---
### Author:  [@Myrnalene](https://boards.straightdope.com/u/Myrnalene)
#### Post date: [March 2, 2010, 9:19pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/11 "2010-03-02T21:19:34Z")
Interesting. I picked up this virus about a week ago but I don’t know if it was here or elsewhere on the internets as I had multiple windows open.
FWIW this [set of intructions](http://www.myantispyware.com/2010/01/28/how-to-remove-vista-antispyware-2010-vista-antivirus-2010-vista-guardian/) worked to get rid of the virus for me.
---
### Author:  [@Dallas\_Jones](https://boards.straightdope.com/u/Dallas_Jones)
#### Post date: [March 2, 2010, 9:36pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/12 "2010-03-02T21:36:55Z")
> [@ghardester](#):
>
> Yes, my Norton caught the same thing as soon as I went to the SDMB this morning at 10:18 Pacific time.
>
> Attacking computer: 94.23.72.47,80 Attacking url: 94.23.72.47/hitin.php? land=20&affid=93101
>
> Threat name: HTTP Fake Antivirus Install Request
I sent a screen shot of the info from the Norton history to sdmbtech as per instructions in the sticky on this page. If the resolution is not good enough, PM me.
---
### Author:  [@Left\_Hand\_of\_Dorkness](https://boards.straightdope.com/u/Left_Hand_of_Dorkness)
#### Post date: [March 2, 2010, 9:42pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/13 "2010-03-02T21:42:29Z")
I wonder if the folks who got this were all using Chrome. After the third time it showed up, I switched to Firefox for SDMB, and it’s not recurred.
---
### Author:  [@The\_Falling\_Reverend](https://boards.straightdope.com/u/The_Falling_Reverend)
#### Post date: [March 2, 2010, 9:47pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/14 "2010-03-02T21:47:49Z")
> [@Left\_Hand\_of\_Dorkness](#):
>
> I wonder if the folks who got this were all using Chrome. After the third time it showed up, I switched to Firefox for SDMB, and it’s not recurred.
Nope, I was using Firefox.
---
### Author:  [@toodlepip](https://boards.straightdope.com/u/toodlepip)
#### Post date: [March 2, 2010, 10:03pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/15 "2010-03-02T22:03:55Z")
Happened to me as well. A few weeks ago, and twice yesterday. AVG picked it up.
---
### Author:  [@samclem](https://boards.straightdope.com/u/samclem)
#### Post date: [March 2, 2010, 11:03pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/16 "2010-03-02T23:03:19Z")
I got it last night and over the weekend,windows XP Using IE.
I just shut down computer and rebooted.
---
### Author:  [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)
#### Post date: [March 2, 2010, 11:20pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/17 "2010-03-02T23:20:34Z")
For those who reported this virus, I am curious about the updates on some software on your computer. What version of Adobe Reader are you using? What version of Java is installed? Both can be determined by looking in “Add/Remove Programs”
The reason I ask is that both programs have been the target of spyware attacks recently, and if you don’t have the most recent updates, it can expose you to infection. The most current Adobe Reader is 9.3.1, and the most recent Java is version 6, update 18.
---
### Author:  [@Ed\_Zotti](https://boards.straightdope.com/u/Ed_Zotti)
#### Post date: [March 3, 2010, 12:08am UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/18 "2010-03-03T00:08:17Z")
As a reminder, if you have this or other malware problems, please do as indicated here:
[http://boards.straightdope.com/sdmb/showpost.php?p=11967039&postcount=1](http://boards.straightdope.com/sdmb/showpost.php?p=11967039&postcount=1)
These things are difficult to track down but we’ll see.
---
### Author:  [@The\_Falling\_Reverend](https://boards.straightdope.com/u/The_Falling_Reverend)
#### Post date: [March 3, 2010, 12:29am UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/19 "2010-03-03T00:29:15Z")
Hey Ed, now that you’ve solved the mystery of giving charter members two titles, how about figuring out why this board has more malware on it than a shady porn site.
---
### Author:  [@chela](https://boards.straightdope.com/u/chela)
#### Post date: [March 3, 2010, 12:17pm UTC](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020/20 "2010-03-03T12:17:17Z")
Yes, I got one and emailed sdmbtech about it. Now today I tried to log out and got a similar suspicious popup asking me if I wanted to logout. It was formatted similarly to the malware popup. IIRC and YMMV but i don’t recall ever getting a prompt second guessing a logout action.
not happyabout this, I have a new computer with all the latest updates and the SDMB is trying to hack me, don’t llike it!:mad:
[Next page](https://boards.straightdope.com/t/anyone-else-getting-fake-anti-virus-errors/531020.md?page=2)