Malicious banner advertisements delivering malware have appeared on two popular websites, travel planning site Expedia.com and music-download site Rhapsody.com.