Just joined the list because the same thing happened to me this AM. Woke up iMac running Snow Leopard with yesterday's patch . . . opened NY Times, clicked Gail Collins column and immediately a blank white page with a small box offering a virus scan by "http.Best.Antivirus03.com" Scared **** out of me so I hit cancel, and off it went anyway just like I had hit OK, on a new page with all sorts of activity indicators flashing. No way to stop it so I bailed out of Firefox 3.5.3 and rebooted the computer . . . repeated it and same thing happened. Dumped out and opened Safari, went to NY Times clicked same column and no problem. Went to
http://www.malwareurl.com/listing-urls.php?urls=off and found'antivirus03.com listed at the top of their latest malware discoveries. Not much of a geek so I don't know what this is but 'best-antivirus03.com' and 'antivirus-online-scan03.com' were both listed new Sept 12 as "Rogue Antivirus / Personal Antivirus - FakeXPA"
Hope this helps. Could this have done anything to my single user computer? Thanks,
Larry