Sunbeltblog comments
Bad, for sure. But, after seeing the Gromozon rootkit infections, this dollarrevenue stuff seems almost a toy. Heh... >
Now that's a video!
About the Gromozon rootkit. I got a hot flash for you. The rootkits are being installed by the same CWS groups that are also installing dollarrevenue.
This is bad as it is a site not devoted to hard core porn and the key word I used "sexy" in my search leads to a link #1 in the top ten of Google and at Yahoo. It is designed to make you think you are going to see a clip of Paris Hilton but you get infected. This set a dangerous precident in the way the adware and other groups are using sites to run scams. Next could be humor clips, music clips, games, etc.
I'm still trying to get my head round Paris Hilton actually attempting to eat a burger. They probably had to get George Lucas to digitally superimpose the burger in her hand or something.
Patrick, this is interesting. I didn't know that they were being used from the same groups.
As for the "top ten" of Google, well... many of the Gromozon pages ranked in the top 10 of Google with searches for words in Italian, and not even with keywords like "sexy": I've seen the gromozon pages turn up on the top 10 many times with searches like "computer resellers Milan". Also, there it wasn't even the chance to not install it, as users without the latest patches were immediately infected by one or more of the multiple exploits.
So yeah in short, while this is still very bad, I think the other one is still worse. 
...and surprise surprise, Zango are all over the Paris Hilton site:
http://www.vitalsecurity.org/200...so-
pushing.html
who'da thunk it.
/ rolls eyes
Commenting by HaloScan
