Forum:Advertising handing out HTML/FakeAV.A trojan?

A viewer of the adwr wiki reported getting HTML/FakeAV.A trojan while viewing a page this morning, specifically the Download article.

(from their A/V logs, I think this was 4:38AM CST - ~12.5 hours ago) 13/06/2009 17:38:26 PM File infection: C:\Documents and Settings\ \Local Settings\Temporary Internet Files\Content.IE5\UU1JV690\1[1].htm is HTML/FakeAV.A trojan. 13/06/2009 17:38:53 PM File infection: C:\Documents and Settings\ \Local Settings\Temporary Internet Files\Content.IE5\SURNGDS2\1[1].htm is HTML/FakeAV.A trojan.

HTML/FakeAV sounds like something that tells the user they have viruses and asks them if they want to download a utility to remedy the situation, which no doubt installs ad/malware on their machine. The only thing I can think of is that it came from one of the many adverts being served, which isn't unheard of. Maybe it was just an overzealous A/V scanner..

Has anyone else seen or heard reports of something similar?

--Superlgn 21:59, 13 June 2009 (UTC)

If you got AVG, you may want to get a different service to check it. AVG did that to me too, claiming I had the same thing.Devilmanozzy 01:17, 14 June 2009 (UTC)


 * My copy of Kaspersky Internet Security detected this on the main page of the Fallout Wiki, after I clicked an advert by mistake:

13/06/2009 13:15:39 Detected: Trojan-Downloader.JS.Agent.ecn Internet Explorer http://powerantivirusscannerv2.com/1/?id=2018&smersh=5ad344b64&back=%3DzQz0TD4NkQNMI%3DM
 * As all AV programs seem to give viruses different names, I don't known that these two are the same, although the ULR seems to indicate that it is some kind of fake anti-virus. --EightyOne (talk) 10:49, 14 June 2009 (UTC)


 * Hi both. This info has been passed to the advertising team.  It may be coming from one of our newer ad providers... they will find out!  -- sannse (talk) 10:50, 15 June 2009 (UTC)

my computer has been detecting trojans lately and this would make sense considering I havn't been going on any new sites.

-- Semaj draehs - any replies to my Talk page  15:31, 15 June 2009 (UTC)

Hi - I just spent the better part of the last hour removing "Antivirus System Pro" from my laptop after hanging around the Last Remnant wiki for a while. I was using Firefox, and it popped up a window telling me the Windows Presentation Foundation is known to have security holes, and I should restart the Firefox app. Knowing better than that, of course, I ignored the warning, and found myself inundated with fake antivirus popups all over my system. Same warning on my other computer, which I promptly heeded then cleaned up the infected computer. This is a very recent ad as I visit this site frequently.