hey, just clicked on an article on your website and immediatly received the "you must install antivirus" popup that infects people with the Personal Antivirus virus.
You might want to get that looked at.
More about :toms hardware infected virus
February 9, 2010 10:16:24 PM
I too have been served the Sysguard "Antivirus Soft" rogue malware program twice today. The first time I had walked away from the PC while I had an article up to find it had tried to install itself and the second time I had just loaded the home page and it was immediately closed with the popup saying "You must install antivirus software" etc etc. I have lost all respect for THG and will likely not be a regular here anymore.
I've had this happen a couple of times here, but at no other sites, each time whilst clicking on a news link. It would take me to the news link, and then redirect to another site, today it was www1.your-pcprotection.in, yesterday was ay-global-antivirus.com.
It may be google adverts, it may be Toms Hardware itself. Either way it'll be Toms Hardware that gets the bad rep.
Ok, think I've worked it out. Each time you click on a News link to tomshardware.co.uk, it goes straight there. However, if you click on a News link to tomsguide.com/us, it is actually going via tv-advert.net (you can see this if you check your back button, it is the previous page visited once you reach tomsguide.com/us). I think it is tv-advert.net that is sometimes springing these 'fake' AV products on you.
(Edit - clarified that it was tomsguide.com/us, not tomsguide.us.)
Interesting, I think it just fools IE into thinking it's a redirect, as if you check the Back button before the Toms Guide (or US Toms Hardware) loads, the tv-advert.net line doesn't appear, but when it finishes loading, it does.
Looks like Toms Hardware Guide UK isn't actually affected, it's just the dodgy sister companies that are pairing with dodgy advertising companies that are happy hosting very dodgy adverts, and of course being linked here without a warning.
I've seen this redirecting behaviour on another site that I frequent alot and it went undiagnosed for a long time. The symptoms were identical to what we have here in that a small number of pages that load with result in a meta redirect to a fake anti virus site called Total Security attempting to fear people into downloading their 'product'.
In the end the following link was passed to the hosting company which assisted in removing the infection. The problem is at a server level as opposed to the website level, so individual site owners can never track down the problem to their site.