Welcome to WebmasterWorld Guest from

Forum Moderators: eljefe3 & skibum

Message Too Old, No Replies

Is anyone else seeing the "FakeAV" virus alerts from ad networks?

12:46 pm on Jun 23, 2009 (gmt 0)

New User

10+ Year Member

joined:Dec 17, 2006
posts: 33
votes: 0

We've been seeing a sudden and difficult-to-track down rise in this "fake" virus and virus as anti-virus software recently.

It appears as though banners from several networks come with a random payload of JavaScript that initiates a full-page redirect to <the url> when the user navigates off the page that contains the banner and payload.

Using FireFox and both the "Live HTTP Headers" and "FireBug" plug-ins, our testers have discovered the code coming from at least two different networks, but is not consistently tied to any one type of banner or advertiser.

Is anyone else seeing this?

[edited by: jatar_k at 1:36 pm (utc) on June 23, 2009]
[edit reason] removed url [/edit]