Trojan detectedFollow

My antivirus software just detected a threat on this site. It was from one of the adds that come up to the right of the screen because that add was not being displayed. Following is the message my AV software gave me.

1/11/2008 8:20:39 AM HTTP filter file http://adtraff.com/swf/gnida.swf?campaign=thespianbe&u=1199883077 SWF/TrojanDownloader.Gida.A trojan connection terminated - quarantined DualCore\Username Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.

I am almost posative that the threat was from here although i did have two tabs open to ffxiclopedia at the same time. I was actively browsing the Alla site at the time and had not looked at the ffxiclopedia tabs for quite some time.

Edited, Jan 11th 2008 1:15pm by DragonsEgg

I was surfing the COR forums and something randomly attempted to DL onto my PC to "protect my harddrive" and this message popped up:

"<harddriveguard.com>

NOTICE: Your system is not optimized and your computer performance is not at the highest level.
Full system optimization will greatly increase your computer’s performance and prevent data loss.

Would you like to install HardDriveGuard to optimize your computer’s performance now for free? (Recommended)"

Fortunately Norton blocked it, but that's kinda scary. ~_~ Btw, I'm using Opera and not IE. I thought I was safe. T_T

Just to clarify: I didn't click _anything_ and i was surfing a random thread and was randomly redirected to a site which attempted to download what Norton classified as a "virus" although that might be hype to make me resubscribe. I can go back to that thread without anything happening now.



Edited, Jan 11th 2008 7:43am by Filian

Edited, Jan 11th 2008 7:57am by Filian

Someone just posted this on Wowhead and I replied there too, so I'm copy/pasting.

These ads are absolutely not allowed on our site. Reputable advertisers do not allow them in their ad networks either, and we only advertise with reputable networks. The trouble is, unscrupulous advertisers will hide this code in a banner that, when it's being tested for malware by the ad network, somehow loads an entirely different, perfectly normal/acceptable advertisement. All of the normal techniques we use to track them down don't work, since they depend on tracking the location that the actual banner served from, and these redirect you without a banner ever loading. We have to either count on the ad networks to pull them themselves--which works MOST of the time, but obviously not all--or we have to rely on our overworked, two-person ad ops team to go through all of the hundreds of thousands of possible banners by hand and pull them out. There will definitely be more angry emails to our ad networks going out today. Sorry about this.

Thanks. Was going to add I got one earlier too, but I'm too late. :)