I just came across this which discusses two Firefox plug-ins that contain malware. They're not available any longer but someone might have installed them. I would hope that AV picks them up, but who knows?