Sticky: Looking for info on redirects to virus scanner sites

[shadowkillua]

1) Internet explorer 8
2)Northern US
3) It happens everywhere at random times.

[Rhyea]

I'm on Firefox, and I live in the Western US.
This has happened repeatedly, but mostly on forums.
I use a Macbook.

[youkoonna]

I'm still getting pop ups every time I'm on gaia saying that my computer is at risk and that I need to download this random virus scanner.

1.) I use Firefox
2) I'm in the Northern US

[Fuhzee]

1) Pacific Northwest Us
2) IE 8 (Internet Explorer)
3) Happens to me alot on gaia when i surf around

[And the Whole NINE Yards]

Mozilla FireFox
Pearland, Texas (basically South East Texas)

I've got this pop-up a lot from browsing forums.

[Sorandra]

I'm in Georgia, using Firefox, and I got this error when changing my avatar's clothing.

I was redirected to a site called nwwage. The Provillus.com advertisement was on the page I was on when I encountered this. I backed up and checked the page source, but I couldn't find anything that should have redirected me to this attack site.

However, I still have the page source if it's needed.. just send me a message.

[Xyirean]

1. Internet Explorer 8
2. Utah
3. mostly around the forums

I noticed I've never had it pop up when I have only one tab of gaia open. It always occurs when I have more then one tab open.
Mostly it's been happening when I have at least my inventory and searching the forums open in the same window.

[Neko_Bri]

Firefox

South Central US

I was changing my avatar.

This one redirected me and closed my firefox, which was particularly annoying as I had to restart my computer to get rid of the thing (an instance where firefox re-opening your lost tabs from a crash is a bad thing).

It's about 1:00 pm my time and it just happened a few minutes ago.
First time I have had this problem.

[chickenbean]

Firefox.
I'm in Central New Jersey
it's happened before, but it's now been about every day for me.

[- - - honey dipper]

I use Google Chrome, and it has happened twice within a few days
It has also happened while I was using Firefox a few months ago
And once before that, also on Firefox, at least six months ago
I am in southern Texas
As far as I remember, it mostly happens when trying to post something in the forum
or going to another part of Gaia
I run my virus scanner afterwards, but it comes up clean.

[Rain the Betrayed One]

firefox, i live in Florida
it happened while i was on gaia on two tabs, i switched from one to the other and it sent me to that virus scan site instead.

[I am Michi-chan]

I've been getting this for the past week, and got it today at about 3:30 or so. I live on the East Coast, and it's getting really annoying. I've been getting a few viruses too but I am unsure if these two things are realted. The viruses were blocked and deleted, but I hope this gets completely resolved soon. And I was using Internet Explorer.

[TheSpottedfur]

I use Firefox, and I live in the Northern U.S. Ehm...I found it while browsing the shops. If it helps, I also run Windows XP.

[Miakayuuki78]

I hope you're still looking into this, because it does still exsist (or it exsists again).

I live in Idaho
I use IE
It happens on most any page, but always within the first few moments of landing on the page. There is no visable ad on these pages. Where the ad should be, it's just blank.

[Raine Dragon]

Page: Durem Depot Shop Page
Region: East Coast USA (Maryland)
Time: 4:30PM EST
Browser: Firefox 3.5.4
Active Browser Adons: Web Developer Toolbar, Alexa Sparky, HTML Validator, Move Media Player, Personas, Stylish
Operating system: Windows XP Pro Sp2

Seems to have spawned from the skyscraper ad on the shop page, but I'm not certain.

The URLs associated with the Blockkeeper page that takes over are:
http://piclie.com
http://birdpel.com

When I hit back, the ad was:
http://media.markethealth.com/ads/1248113634xwomen-provillus-120x600.gif
http://www.provillus.com/?aid=852176

but I do not believe that your system preserves the ad when you use the back and forward button, correct?