Users might end up with rogue anti-virus software on their machines by searching for Halloween costumes online.