[Bob Lawrence]

I liked this approach.

one cause dot org.

Had me running a virus scan all night, trying to find out why my IE7 Browser was showing an error message. lol




Do Not Do the INSTALL...

[Bill]

Portrait portraying a pensive pose. Perfect!

[Bob Lawrence]

For some reason It only affects IE not firefox or Opera, I haven't tried my other browsers yet. I'll have to resize the warning message I get in IE7 to upload the screen shot. But it wants to install a Virus scanner [which i know that its a virus/trojan itself] seen this on clients computers before] ....

[Bob Lawrence]

Here's the screenshot.

Guess I have to remove some of my other pictures to upload this one sorry.

[Julian]

Am I correct in assuming that if you visit that site, a virus is installed on your computer?

No matter how bad things are with onecause, are we sure we want to be applauding this kind of behaviour?

[Bob Lawrence]

I believe it to definately be a virus, not so much that I'm supporting this guy. But if people are looking for one cause and install this virus. They just may have to do a fresh install of the total operating system. Like I have had to do with some clients computers. One client here in town had over 590 viruses and trojans, adwares and spyware. To re-fornat their hard drive was the only I could clean the system as they re-wrote theirself faster than any anti-virus programs I have could remove them. And I believe this is one of them.

[Bill]

Huh? I see nothing but the image in Firefox on a Mac. In fact the page code shows ONLY the image source:

<center>
<br><img src="http://onecause.org//img/MyPicture2.jpg"><br><br><br></center>

That's all I could see on this Mac in FF and Safari - not even the opening and closing [html] statements are there. Must be something hidden in javascript or php before the page that senses "something" for IE and excludes others. Weird.

[Bob Lawrence]

Yes must be something Javascript. Dosen't affect Maxthon or Netscape 8.1, Just my IE

[Bob Lawrence]

Am I the only one getting this error message with IE7? I just did their patch update and updates for AT&T yahoo.
Its redirecting on IE to http:// online virus buster dot com / 2009 / 1 / en / _freescan dot php ? nu = 880147

Spaces added to prevent hot link.

[2busy]

Maybe the domain is owned by OC and they're using it for sleazy CPA ads to capitalize mistypes? Wouldn't be the first parked domain that got hit. Reporting it at stopbadware.org will get it out of the searches and issue a warning to visitors until the problem is corrected.

[Bob Lawrence]

Whois shows registrant as a Robert in KS Oct. 2 2002
Not me

[Bob Lawrence]

Update;
The site has already been reported as a virus 2009 exploit.
Thank you 2busy.

[loxly]

Changed the thread title Bob.

[Bob Lawrence]

Ok I wasn't sure what to name it. Loxly

[Bob Lawrence]

Thanks for the update Haiko,

The 1 blank dot org does redirect tho on a google search of the 1 cause and the org is about the 4 or 5th position down.

Strange that it will only redirect IE, I had my nephew in Cincinati check it out and he got the same thing. Its been reported to the major anti-virus companys now and the top 10 search engines so maybe, this will slow it down some. Least I hope so.

[Bob Lawrence]

one cause dot org.

This one? or are you saying the number 1

[Bob Lawrence]

PM'd you the report link Haiko,
I just hope no one here got infected from this.

[Haiko de Poel, Jr.]

Deleted.

Thanks Bob.