Website hoax ?

  • Thread starter Thread starter John .
  • Start date Start date
J

John .

Take a look at this website. I got there accidently by a misspelling:

www.drugereport.com

There is a popup box which "looks" authentic which says:

"Virus warning. W32 RPC Virus detected. Click ok to scan and clean"

Hoax?? spamware??
 
Take a look at this website. I got there accidently by a misspelling:

www.drugereport.com

There is a popup box which "looks" authentic which says:

"Virus warning. W32 RPC Virus detected. Click ok to scan and clean"

Hoax?? spamware??
Click to expand...

well this URL forwards to http://www.gotoo.com/treasure/news.html
which forwards to http://www.ownbox.com/treasure/search.html
which uses http://www.ownbox.com/treasure/0-casino.html

there you can find the source:
<html><head>
<title></title>
</HEAD>
<BODY onload="confirmGoto()">
<SCRIPT>
var exit=true;
function confirmGoto() {
if (exit) {
if (confirm(" Virus Warning !!!\n\nW32 RPC Virus Detected.
\n\n CLICK on OK\n to Scan and Clean !"))

{window.open('http://ad1.zendmedia.com/ad-rpc.php?id=adru606');
} else {
}
}
}
</SCRIPT>
</body>
</html>

which tries to open a window hosted at http://ad1.zendmedia.com
where you can buy Computer Shield Firewall SW (via
http://www.buysmarter.com)

Any further questions?
 
well this URL forwards to http://www.gotoo.com/treasure/news.html
which forwards to http://www.ownbox.com/treasure/search.html
which uses http://www.ownbox.com/treasure/0-casino.html

there you can find the source:
<html><head>
<title></title>
</HEAD>
<BODY onload="confirmGoto()">
<SCRIPT>
var exit=true;
function confirmGoto() {
if (exit) {
if (confirm(" Virus Warning !!!\n\nW32 RPC Virus Detected.
\n\n CLICK on OK\n to Scan and Clean !"))

{window.open('http://ad1.zendmedia.com/ad-rpc.php?id=adru606');
} else {
}
}
}
</SCRIPT>
</body>
</html>

which tries to open a window hosted at http://ad1.zendmedia.com
where you can buy Computer Shield Firewall SW (via
http://www.buysmarter.com)

Any further questions?
Click to expand...

Yes. Only works with IE? It doesn't with Mozilla or Opera. I do see
the silly virus warning with Java Script on. But then whichever button
you push it leads elsewhere (I think it was the /treasure/news site).


Art
http://www.epix.net/~artnpeg
 
Yes. Only works with IE? It doesn't with Mozilla or Opera. I do see
the silly virus warning with Java Script on. But then whichever button
you push it leads elsewhere (I think it was the /treasure/news site).
Click to expand...

If you have the automatic redirection enabled in Opera, you get sent to
some other site, otherwise just a blank page, which usually indicates
that the site wasn't worth displaying.
 
Back
Top