twice now my avg has caught a virus on paid u sure

I'm not getting any results for finding this site, what is the exact address, making sure its not clickable.

Sam, do you mean paidyousure.com ?

I do not see anything when I go there, but that doesnt mean a whole lot.

I see this site is on 5starpromotions banned list for zero iframes. Could be a banner rotation on different ref links. Running some through the Detektor now after googling it.

Went to the homepage, went through all the banners rotating at the top, nothing happened. Was this a paid email link or was you just going to the site?

Don't know where, use firefox and all the other good firefox add-ons. But after clicking on many, many ref links my virus alert went off and asked if I wanted to remove the following:

Media Pass - Application, it was a zip file, two of them. Got me.

CCJ

I'm also using FireFox (verson 1.0.7), don't know if you have this feature disabled but if you go to TOOLS, OPTIONS, WEB FEATURES, and uncheck the box for "Allow web-sites to install software" this will help. I'm also running Spybot (immunization & resident enabled) so it will lock out malicious codes from installing onto my computer. I have learned, after having to FDISK so many times to remove the garbage. That's the only way you can really remove a lot of it.

Edited to add: Spybot also has a function to lock the IE home page so it can't be hijacked! I also enabled it, too.

"Allow web-sites to install software" - I have this done to where nothing can be installed without me knowing it, I have firefox 2.0.0.3. I use to to Spybot put my virus software says it has a conflict with it so had to uninstall it. I do have Spyware Blaster which will lock everything in firefox and iexplorer. That was what surprised me about the two zip files from media pass. So I added media pass to my block list. But I never saw any banners for media pass on any of the pages I looked at. Oh well.

Hmmm, maybe I'd better add MediaPass to my restricted zone, too. Is it mediapass.com, .net, .org? Just want to make sure that I block this one manually, never can be too safe. Thanks for replying and letting me know.

http:// www.mediapass.net/downloads
http:// www.mediapass.net
*mediapass.net*

Normally all you have to do is add the base domain, but I did all three for super duper protection.

Copy from my log:
BellSouth Internet Security Anti-Spyware

Media Pass Application 3/25/2007 1:33:48 PM
Media Pass Application 3/25/2007 1:33:53 PM

File generated by BellSouth Internet Security Anti-Spyware