Fake Google AdWords Directing Users to Phony Websites
Win.rar GmbH, which is the official publisher of RARLAB products and WinRAR compression program, has cautioned computer users about fake Google AdWords that have deceitfully used the firm's name in ad word and is taking users to a fake Download.com site.
The counterfeit Download.com page offers an updated version of WinRAR installation file. Upon deploying the updated WinRAR file, a malicious application automatically runs that opens a new message window every minute stating "intervalhehehe".
The malevolent program is implanted in the following way: every time, a scared user starts searching the pop-up message "intervalhehehe" on Google, the search directs him/her to forum entries that confirm the problem. But by exploiting the local PC's host file (LMHO...
» SPAMfighter News - 04-02-2009