Why is toms hardware infected with a virus?

hey, just clicked on an article on your website and immediatly received the "you must install antivirus" popup that infects people with the Personal Antivirus virus.

You might want to get that looked at.

I too have been served the Sysguard "Antivirus Soft" rogue malware program twice today. The first time I had walked away from the PC while I had an article up to find it had tried to install itself and the second time I had just loaded the home page and it was immediately closed with the popup saying "You must install antivirus software" etc etc. I have lost all respect for THG and will likely not be a regular here anymore.

THG doesn't place most ads themselves (except the full page themes), they are just Google ads which cycle automatically.

I've had this happen a couple of times here, but at no other sites, each time whilst clicking on a news link. It would take me to the news link, and then redirect to another site, today it was www1.your-pcprotection.in, yesterday was ay-global-antivirus.com.

It may be google adverts, it may be Toms Hardware itself. Either way it'll be Toms Hardware that gets the bad rep.

I was unable to reproduce the redirect to tv-advert.net, even with the adblocker disabled.

Interesting, I think it just fools IE into thinking it's a redirect, as if you check the Back button before the Toms Guide (or US Toms Hardware) loads, the tv-advert.net line doesn't appear, but when it finishes loading, it does.

Looks like Toms Hardware Guide UK isn't actually affected, it's just the dodgy sister companies that are pairing with dodgy advertising companies that are happy hosting very dodgy adverts, and of course being linked here without a warning.

HAH! Haven't seen no ads in ages....
FF + AdBlock Plus + NoScript FTW!

Looking into it.

I've seen this redirecting behaviour on another site that I frequent alot and it went undiagnosed for a long time. The symptoms were identical to what we have here in that a small number of pages that load with result in a meta redirect to a fake anti virus site called Total Security attempting to fear people into downloading their 'product'.

In the end the following link was passed to the hosting company which assisted in removing the infection. The problem is at a server level as opposed to the website level, so individual site owners can never track down the problem to their site.

http://blog.unmaskparasites.com/20 [...] redirects/