AA main page...Trojan?

[ccCapt]

When I come on the AA main page, my Kaspersky AV pops up with an alert.
Trojan-Downloader.VBS.Psyme.gf
http://google-counter.com/rss/index.php

What's up with this? Anyone else's AV picking this up?

When I click on that URL (http://google-counter.com/rss/index.php) I get this....
Kaspersky Anti-Virus 6.0
The requested URL http://google-counter.com/rss/index.php is forbidden

Did a search and found this............
http://www.viruslist.com/en/search?VN=Trojan-Downloader.VBS.Psyme.gf&referer=kav

 

[JDogg]

when i first logged on, my norton firewall said it blocked a threat. :?

 

[Fishyfanatic]

Moved to the Site Help forum. I get them occasionally too.

 

[tecwzrd]

Moving to site help.

It's come up before as a topic but I've never seen it using Firefox.

 

[Fishyfanatic]

Maybe it's an IE issue?

I can't use FF on my computer. It doesn't work for me.

 

[blazeyreef]

mine dose it as well. I always click "clean" and it gets rid of it but it always comes back.

 

[roka64]

I think it might be spyware on your PC.

 

[Jchillin]

I had posed this question sometime last week. Since it is occurring on more user's PC's, my original diagnosis is obviously in error.

 

[Fishyfanatic]

McAfee has automatically blocked and removed a Trojan.

Details
Detection: Generic Downloader.o (Trojan)
File Path: C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\DGTF06UA\z-cs-an[1].htm

More Info
Trojan horses appear to be legitimate programs but can disrupt, damage, or provide unauthorized access to your computer.

McAfee recommends that you scan your computer for other threats.+

This is what mine says. Then IE says that this website wants to run the following add-on Microsoft Data Access - Remote Data Services Dat... from Microsoft Corporation. If you trust the website adn the add-on and want to allow it to run, click here...

 

[fishfreek]

If it only occurs when you visit the home page the AV program likly does not like one of the scripts on that page. It could be something like the one that pulls images from the gallery.

Which style are you using when you get such an error?

 

[MT79]

I've been getting the same thing for the last 4-5 days. FWIW I use McAfee AV, using subsilver style.

 

[Fishyfanatic]

Graphite style

 

[JDogg]

blacksoul

 

[Jchillin]

BS

 

[ccCapt]

I think it might be spyware on your PC.

huh? If I wasn't running a good AV, maybe it would have loaded on my pc. I would rather see my AV catch something then go to the same page where some others were get alerts, and I didn't

Running Vista Ultimate, IE 7, subSilver theme for forum.

If it only occurs when you visit the home page the AV program likly does not like one of the scripts on that page.

Yup, not sure what google-counter is, but it probably is some script that KAV and some other AV's don't like.

 

[Jchillin]

My original post

Contains a screen shot of the "capture".

 

[Zagz]

I got norton warning that a trojan had been blocked when I logged in yesterday as well.

 

[Cliffz]

FWIW-I get hit with same download trojan.

 

[Purrbox]

I've seen this problem on both my laptop and desktop PC when visiting AA. It's being caught as a downloader virus on both, one of which is using Norton Antivirus and the other is using PC Chillin. Both are running Windows XP Pro with IE 6 and the Graphite Style. I have noticed that both are spotting it in a html with 404 in the name.

 

[Fishyfanatic]

I get the error every time I click on a message from my e-mail. I don't go to the AA homepage, just straight to the messages.