Does Serious eats have a virus?
Twice this afternoon while I've been on serious eats (but not on other sites) I've had my screen on firefox suddenly flash a big warning, show what seems to be a picture of "my computer" screen, and tell my I've got viruses in my documents, my hard drive, my shared documents etc, and invite me to download a program to fix it. Almost did, but my good computer doc told me never to download an exe file that I didn't recognize. I had trouble getting out of the screen. Ran my antivirus, AVG, and only cookies turned up, no viruses. I'm thinking if I downloaded this program I would have had trouble.
Anybody else have this happen?
Add a comment:
Previewing your comment:
HTML Hints
Some HTML is OK: <a href="URL">link</a>, <strong>strong</strong>, <em>em</em>
Comment Guidelines
Post whatever you want, just keep it seriously about eats, seriously. We reserve the right to delete off-topic or inflammatory comments. Learn more at our Comment Policy page.
If you see something not so nice, please, report an inappropriate comment.
Start Talking!
Need a question answered? Have advice to share? Start a Talk topic now!
Sign up to get your questions answered and share advice.

29 Comments:
I'm hoping this doesn't make anybody think they have to stay away from serious eats. I didn't actually end up with a problem. But I thought I'd better alert people not to download that program if it happens to them. I'm hoping somebody knows a great deal more about this kind of thing than I do.
lemonfair at 5:41PM on 09/19/09
It's not happening here. We've got a Mac.
Definitely sounds like you've got a something-- but DON'T download the program being offered by the "warning" because then you'll really have a problem.
Restart your computer, dump the cache or cookies, do your software updates and restart it again. If you still get a warning, go to a reliable site like Symantec, PC World, McAfee or other well known site.
Whatever you do-- DON'T CLICK the WARNING link or download anything that "pops" up by itself unless it belongs to your anti-virus software. Even then- go directly to the website. Don't click on the link or pop-up.
CJ McD at 5:53PM on 09/19/09
That's been happening to me also. I just ran my Norton Semantic to be sure and didn't click on what popped up.
dhorst at 6:00PM on 09/19/09
Thats a pop up I have seen in the past it is not a virus and my system is gold old MS with AVG and I got nothing here.
JerzeeTomato at 6:13PM on 09/19/09
@dhorst - do you mean it happened while you were on serious eats?
@Jerzee tomato - do you mean this is actually some kind of ad??
lemonfair at 6:27PM on 09/19/09
I had something like that happen once the other day. I just started clicking every "x" once I saw it since I recognized what was happening pretty fast. Hasn't happened since though.
joyyy at 7:03PM on 09/19/09
it just happened to me! i just clicked my way out of it and here i am!
hope i don't have a virus.
pooch at 7:12PM on 09/19/09
I don't know if this is related. I have a Mac and sometimes when I click on a link I get a download but I don't see that anything has actually been downloaded. It happened today, but I can't remember which link I clicked on when it did.
twosavoie at 7:34PM on 09/19/09
The SAME THING happened to me a week or two ago--I did a 'system restore' which essentially wipes the computer clean after a certain date--I system restored back to August 20th, updated Windows and Antivirus and didn't have problems afterward, but until I did that, I kept getting those pop-up screens.
What you are talking about is Malware--a teaser that encourages you to download a rogue program by convincing you you have a virus.
HeartofGlass at 7:37PM on 09/19/09
I've reported this to our ad team to investigate. Definitely not the sort of ad we'd intentionally serve on Serious Eats, and hopefully it's not malware.
Alaina Browne at 8:04PM on 09/19/09
It is a pop up.
JerzeeTomato at 8:18PM on 09/19/09
Thanks Alaina.
This didn't have any x's I could click to get out of the screen, that I could find. The first time I was able to move to another tab, and the second time I couldn't do either that or close out firefox. I had to restart the computer in order to get rid of the warning.
lemonfair at 8:59PM on 09/19/09
It's probably just some annoying pop up ad.
I don't see them (on a Mac using Firefox).
gingercookiewithlime at 9:56PM on 09/19/09
It's malware, likely "Total Security." Does it offer to clean it for 79.95? I just spent the last four hours ridding my FIL's computer of this junk.
Ugh.
Garvey at 10:24PM on 09/19/09
@lemonfair--it has just happened here at SE. It's saying my computer is at risk and looks like my screen and warns of different viruses and trojan horses. It's saying something like Virus Doctor or something similar. Hopefully the team will be able to take care of it soon. The folks here at SE are pretty terrific.
dhorst at 10:33PM on 09/19/09
I got it, too. I expect McAffee to zap it soon.
beth1 at 10:43PM on 09/19/09
This is a virus/malware item that's been going around for quite some time. The problem is that it updates itself faster than most of the "anti" programs can keep up with, and every time there's a major update, a whole lot of people get infected. Because there has to be the virus in the wild before the "anti" people can come up with the detection algorithms.
And once it has infected a computer, it's smart enough to shut down the major "anti" programs. They look like they're running, but they pretty much get neutered.
I doubt it's coming from SE itself. Just being online is enough. One of the last times it ran amok, people thought they were installing a Java update when they got popups that seemed to come from the websites they were visiting. But it wasn't on any of those websites, and it had nothing to do with java.
I haven't seen this particular bug for a while, so I guess it's about time it comes back around again. I guess I'll be busy next week...sigh...
dbcurrie at 11:01PM on 09/19/09
We run the ads for Serious Eats, and we're checking into what's happening. As dbcurrie says just above, one thing we've seen in the past is code that comes from a downloaded program and then makes your Web browser put different ads onto a page.
There was also a malicious advertiser at the NY Times last week who hid malware in an ad campaign. Here's their explanation, and a screenshot of the nasty ad: http://bit.ly/31OAw2. Are you seeing the same ad?
If you'll let us know here if you're seeing the same ad, and if you're seeing this problem on any other sites you visit, that'll be helpful as we track it down.
Thanks for reporting this and helping us fix it. We hate this stuff, especially when it's causing problems for our favorite Eaters.
-- Neil Chase, Federated Media
Nchase at 11:09PM on 09/19/09
@Neil, I've also seen the same bug redirect users to sites that look the intended one, but with with added content/links. The most interesting was a Google clone. It could happen to any site, including SE.
dbcurrie at 11:50PM on 09/19/09
If you're concerned about something nasty on your hard drive, go to - www.malwarebytes.org - and get yourself a free installation of their Anti-Malware scanner. My computer geek pals told me about it after I picked up a virus - it was one so new that McAfee hadn't yet discovered it. But Malware immediately located it and quarantined it so that I was able to do the necessary things to get rid of it. My computer was fine after that.
I run it once a week, just to be safe................
Womandingo at 12:40AM on 09/20/09
@neil: I was too flustered to write down what it offered, unfortunately. There was the word "green" in the exe file, and there was also something like "trusteddownload.info" That's not it exactly. I googled the phrase it offered, and when I google "trusteddownload" this morning I get something different. But last night when I googled " [trust]download.info" a few dot com references came up that looked like they might be legit, and that were options in the google search. But this was definitely a dot info link, which I'd never heard of.
No, I didn't get the fake virus scan, like the NYTimes had. My total screen was replaced (the URL was no longer serious eats) by an enlarged screen that looked approximately like the "my computer" screen, with shared documents, my documents, local disc on it, and the left hand menu, as well. Under shared documents in red letters it said I had 8 viruses, under my documents it said I had 2 viruses, etc. The second time it ran yesterday the number of viruses it told me I had was different.
It had a "warning" message, and when I tried to close out the screen a box popped up that told me my computer could crash if I didn't choose the option to download the .info thing. This was after I had initially proceeded to a second screen, so I may have gotten malware. I'll go to the malwarebytes.org site. I haven't had any trouble since this though (in fact for some reason things are running better. I run my avg through a complete scan about 3 times a week, so it shouldn't be that). I haven't gotten any pop up ads.
lemonfair at 5:43AM on 09/20/09
@womandingo: When I tried to download the malwarebytes.org software I got a box that said "you have chosen to download mbam-setup.exe. Do you want to save it." I was too wary of saving an exe file after yesterday, so I didn't But I think it's legit. Do you know if you had to do that in order to download the malwarebytes scan?
lemonfair at 5:51AM on 09/20/09
@Neil: This morning my avg shows two threats, which must be from the 2 instances yesterday, and it must be that avg has now caught up with them and hadn't yesterday. It's a trojan horse, and the line about it on my scan is:
...localsettings/Temp/KkPk7v...Trojanhorse.downloader.Generic8.BLOQ
Hope that helps. (The scan hasn't finished running yet. If I find out more I'll let you know)
lemonfair at 7:49AM on 09/20/09
I'm running Safari on Mac and I sometimes get a download from the web (that contains nothing) when I click on SE or any of its links. It's annoying, and when I'm done I send the downloads to trash. Haven't had time to set up a meet with my computer guy yet.
ride&cook at 8:10AM on 09/20/09
@lemonfair, the mbam-setup.exe is the correct setup file for that program. Download it, install it, and then update it until there are no more updates available. Sometimes there are as many as three updates before it's finished.
The default is to run the shorter scan, but the complete scan is (obviously) more thorough. But it takes a looooong time. Very long...And if it finds anything, particularly if it tells you a reboot is necessary, it's a good idea to run the scan again. Often, it picks up things on the second scan that it didn't find in the first. What I normally do on an infected computer is to run the program until the last scan says that nothing is left.
Over the next few days, it's not a bad idea to run another update (they update the signatures often) and run the full scan again, just to clean out anything that the new updates find.
dbcurrie at 12:30PM on 09/20/09
@dbcurrie - thanks so much for letting me know that.
lemonfair at 1:04PM on 09/20/09
I havent experienced anything remotely similar.
MIND YOU: I'm a mac user. Always will be.
Apple ~4~ Life
hungrychristel at 9:45AM on 09/21/09
@lemonfair - I'm so sorry I didn't check back here after posting. Forgive me.
Yes, install anything from that site. Malware Bytes is completely reliable, and a real life-saver. I hope by now that you've got it all under control, but it wouldn't be a bad idea to have the site I recommended installed on your computer and run it regularly.
Again, I'm sorry for not staying current, but I hope all is well for you now.
Womandingo at 4:27AM on 11/15/09
Yes that happened to me as well...and only while on this site......I just clicked on the "x's" to get out of the screen..I thought it was some type of "pop-up" add...
Italiancupcake at 5:41AM on 11/15/09