About this blog

Bob Sullivan

Corporate sneakiness. Government waste. Technology run amok. Outright scams. The Red Tape Chronicles is MSNBC.com's effort to unmask these 21st Century headaches and offer real solutions that save you time and money.

Bob Sullivan covers Internet scams and consumer fraud for MSNBC.com. He is the winner of multiple journalism awards for his coverage of online crime and author of Gotcha Capitalism: How Hidden Fees Rip You Off Every Day and What You Can Do About It. and Your Evil Twin: Behind the Identity Theft Epidemic.

Got some red tape you want Bob to untangle? Write BobSullivan@
feedback.msnbc.com.

Virus experts warn of 'Google poisoning'

Posted: Monday, December 3 at 12:49 pm CT by Bob Sullivan

You might want to take an extra half-second the next time you click on search engine results to make sure you know where you're going. Computer criminals have refined a sinister technique for tricking Web surfers into clicking on infected Web pages, turning search engines like Google into unwitting partners.

It's known as “Google poisoning,” because Google is the biggest target, but it can impact any search engine. Criminals construct booby-trapped Web pages, then dupe search engines into giving them high rankings.

Last week, security research firm Sunbelt Software found that a simple search for something like "funny dog picture" on Google directed searchers to Web sites hosted on Chinese domains. Those who clicked on the links were pushed to install a malicious program named "Spy-shredder."

Last week alone, criminals posted 40,000 to 50,000 of these malicious pages in a single, coordinated attack, said Alex Eckelberry, CEO of Sunbelt.

"What has surprised security researchers was the scale of this,” Eckelberry said. “This was a very big attack, a very fast bolt from the blue."

Those who fell for the trick suffered “a bad infection,” he added. “There was a lot of nasty software out there.”

Google removed the links from its database immediately when notified, Eckelberry said. But the criminals were back the next day with more virus-laden Web sites on different domain names.

A Google spokeswoman who declined to be identified said the company is aware of the problem and working to keep its results clean.

"Google works hard to preserve the quality of our index,” the company said in a statement. “We actively identify sites that serve malware or abuse our quality guidelines in other ways."

Not new, just more sophisticated
Publishing booby-trapped Web sites or “gaming” Google's search algorithms aren’t new practices. Readers of this column might remember a recent entry concerning Search Engine Optimization. Called "SEO" by practitioners, search engine optimization runs the spectrum from legitimate linking to affiliated Web sites to the creation of hundreds of fake sites designed to artificially inflate Google rankings, which essentially judge how many links a Web page attracts.

URLs that end in .CN could arose suspicion071203_screen_hsmall_10astandard
But criminals are now combining SEO tactics and booby-trapped Web pages, and doing it systematically. By posting tens of thousands of Web sites simultaneously, criminals can take over all the top spots on a search results page, casting a wide net that’s more likely to catch Web users.

Eckelberry described these criminals as "SEO Gods," saying they can "take any site and get it on the first page of Google results."

'Comment spam' also a problem
In addition to cross-linking all these fake Web sites, criminals are also engaging in "comment spam" to enhance their search engine rankings, said Zulfikar Ramzon, a researcher with antivirus firm Symantec Corp. Popular blogs -- including the Red Tape Chronicles -- are regularly bombarded with computer-generated, meaningless comments that include a link to another site. By getting a link on a popular Web site, the spammer’s Google ranking improves. We try to keep comment spam off MSNBC.com, but it often slips onto blogs all around the Web.

No one knows how successful the tactic is, though Eckelberry points out the criminals wouldn't keep doing it if it didn't work. Still, even an attack of 40,000-50,000 fake Web sites still represents an infinitesimal portion of the sites in Google's index, making the odds of any individual consumer encountering a poisoned Google link still quite small.

"I don't want people to get scared of Google," he said. “Google is impressive with how quickly they remove bad sites.”

RED TAPE WRESTLING TIPS
It's wise to look both ways even when crossing a quiet street, and it's wise to take an extra glance before clicking on a search engine link. Google makes this easy by listing the URL under each search result. In the most recent attack, potential victims might have noticed the .cn suffix on the end of each domain name, a signal that the Web site might be in China and might include unexpected content.

That's not a foolproof strategy, however. Computer crooks sometimes deploy a technique called "Google cloaking," which tricks the search engine into displaying the wrong URL on search results pages, Eckelberry said.

Old advice also works well here: Keep up with security patches. This latest set of attacks relied on vulnerabilities that allow a Web site to install software onto a visiting computer without a user's knowledge. Fully patched systems merely received a pop-up window inviting users to download video software -- a much easier attack to avoid. Again, this is not a foolproof protection, but keeping your security current severely decreases your odds of being infected by Google poisoning.

Finally, Eckelberry recommends that Windows users set up separate user accounts for their children. That will limit the damage that a child can do by searching the Web with your computer.

MAIN PAGE NEXT POST 'Father of ID theft' turns over a new leaf

Email this EMAIL THIS

229 COMMENTS

Automation encourages laziness in humans, and when it succeeds, we pay a heavy price. Technology won't make the saying "Caveat emptor!" obsolete anytime soon.

Does this also apply to the Yahoo search engine?

I get comment spam all the time - and I run a VERY low visited website about lap band surgery. I can only imagine how a site like Redtape gets pounded. These people really need to put their annoying habits to better use!!

The easiest way to avoid this problem is to STOP USING INTERNET EXPLORER!!! Use Firefox instead. Even if you don't have the latest patches or anti-virus most of these sites don't trigger with Firefox.
http://www.mozilla.com/en-US/firefox/?from=getfirefox

Yes, this applies to any search engine and ANY browser. Firefox is safer right now, but that will change with an increased userbase (that applies to ALL browsers, like Explorer, Firefox, Opera, Safari, etc.). Being smart about you web practices and keeping your definitions up-to-date is the way to go.

Firefox has its own set of problems, just patch your browsers and pay attention to what sites you are going to.

How do I know that which search engine is safe to use?

GP in San Diego is right. Firefox doesn't get nearly as many tracking cookies or spyware from sites like that, and neither does Opera. But some legitimate sites will not work in anything but IE. And to many computer users, Firefox or Opera is alien. The simplest way to avoid spyware and viruses is to run either a subscription based antivirus, such as Norton, or a free antivirus such as avast! or AVG. The choice of those is usually based on if someone can afford top-notch virus protection at a price, or settle for something that might not be as effective for free (However I have found that free antivirus is often as good as the stuff you pay for) Of course, nothing is perfect, and anyone who isn't comfortable with computers, and thinks they may have spyware or viruses in their system should have someone familiar with computers, such as a family member, look at their system. Or they can take it to someone like the Geek Squad. Again, based on cost, and dependent on the people you know.

But, the best advice for anyone using IE I can give is this: Don't go to any sites you are suspicious of. Pay attention to the top-level domain, the .com/.org/.net part of the address. A Chinese domain I think is .cn. Of course, that doesn't necessarily mean that all Chinese sites are bad, nor will all malicious sites have off-kilter top-level domains. One thing that Firefox has going for it is that it has an excellent phishing filter that tells you when it thinks a site is being spoofed and is actually a site trying to steal your identity, and it also will detect sites that may have spyware on them. Only the latest version of IE has this, IE version 7, and I don't think it works quite as well as Firefox's. I can't say anything for Opera, I haven't used it. Anyway, safer surfing is not that hard, as long as you do your best to avoid tricky looking sites.

I got a virus just by looking for e-card sites. I was using AOL.But AVG instantlay trapped it and no harm came to me and my PC.AVG wont my respect and faith !

A few comments:

Most basic anti-virus software has proprietary rankings that indicate the safety of search engine results. These ranks are based on the scanned results of these site. I personally use McAfee which I think would help a less advanced web user determine whether or not a site is safe.

Additionally, I would like to point that that SEO is a legitimate internet marketing activity and most practitioners are operating ethically and lawfully. I think the field generally gets a bad rap as unscrupulous because of some well publicized bad apples. Unfortunately this article perpetuates this stereotype. What you or Eckelberry fail to mention is the time and resource it takes to get a site to the top rankings of a search engine. While it may only take some minimal (unethical or criminal) effort to get to the top of a search term like the one used in your example "funny dog pictures". However, there is no magic elixir to overnight get to the top of a well trafficked search term like "weddings".

SEO should be a key part of any business plan. The trick is to do your homework and research before making this type of investment in your business.

Respectfully,
A SEO Practitioner

Would it not be great if all the web users were honest and non-malicious. I know that is a Xanadou approach to life but damn I am tired of the games that the crooks of the world play.

Try computer associate firewall software, it works for me.

I use firefox.

Firefox, eh? Well, if everyone migrates to firefox won't the criminals do the same? I heard rumor that there's a group redoing the web. Although that is a long-term project, I sure hope they're able to stop all this.

The BIG BLUE E needs to be removed from your machine.
Use Anything But Internet Explorer!!!!!
As Stated By GP San Diego Firefox is one of the best.
I have 6 web pages I am web master for. The only time I
use Internet Explorer is for testing ONLY.I publish and
surf with Firefox ONLY.

There's a simple solution, SiteAdvisor from McAfee is a free software, which sorts out safe and un-safe websites.

Wow! I am a light internet user and I must admit not all that technology savy anymore. I found this information to be quite an eye opener and very useful, especially Thorgrim, Saluda, SC although I must admit I now feel suspicous of all info. Why do these people do these things? Is there any financial gain or are they just pranksters?

I cringed when I heard of SunBelt Software. I've been trying to get off their mailing list without success. They've been sending me unsolicited emails for several months. I'd report one of their emails as spam, then get another email from a different sender a few days later... I'm surprised they're quoted as a reliable source here, although it's possible their research arm is more credible and legitimate than their marketing arm.

Using Firefox as a workaround for security holes with Internet Explorer is kind of like a pyramid scheme...it only works for the initial few. The reason IE is more targeted by unsavory types than Firefox is because IE is more popular. The geeks who write malicious code were never popular, therefore they have a bone to pick with anything popular. If everyone switches to Firefox, then the virus-writing geeks just start targeting Firefox. Next thing you know, using Microsoft browsers will be considered punk and edgy.

i prefer lavasoft, and pandasoft as far as freebe's go. since i have downloaded them my P.c. has never run better. firefox gave me unwanted viruses. What is up with that?

This is another story like the British lost CD's scenerio, and the key word again from my point of view is the key word's Human Factor and Complacency with a new word Lack of Compliance. The Human Factor in any technical area plays an importantance in the field of Technology because most major mainframe systems are in need of experienced personal to monitor security, no matter how many firewalls or security software you have installed upon a system or a group of systems the human factor is there to insure that such malign and altered programs and processes will not make an appearance out in webland, that is the reason why major Corporations hire individuals whose position entails to monitor security. These individuals are suppose to be professional within their particular positions yet it seems to me that Corporate America just dosn't get the old adage " You receive the service level you pay for ", if a janitor is obtaining a higher rate of pay than the technical staff, then you also receive the same service level. Did anyone tend to think this might be a disgruntal employee or group of employees from a corporation that is basically a dollar wise and a penny short, whom is getting sick and tired of being nickle and dimed to a slow death and isn't getting paid his or her worth? Can it be a scenerio were Mister CEO only has obtaining that multi-million dollar bonus on his mind when the board of directors votes him out of his platimum and diamond encrusted throne? Can it be the cost cutting Bottom Line psycho businness practice which is basically another form of maintaining a CEO's life style before the auditors finally find out he performed the Lord Black of Canada? Can it be because the CEO whom was voted out by the board of directors has to be paid under the terms of his contract for the duration enwhich the contract is still in effect so the services are dramatically reduced in service quality and staff in order to pay for a person whom was nothing more than a corporate paper weight in the first place?
Complacency: the above factors mentioned can play a great part in this factor but also office politics has a crutial role in this dillema. Lack of Compliance: in laymens terms relaxing or off guard, outright lazy, these situations can also lead to problems across the board in any organization, business, government etc.
My view is basically someone turned the intern loose without any guidance or instructions of the what if scenerio or someone lost the security plan book. I would again say this is a hacker this time the hacker or hackers were assisted by an individual or individuals whom have knowledge on how to over ride various levels of security software and firewalls.
Maybe instead of paying big bucks for corporate dead weight maybe a wise investment into very talented techology personal would reduce this never ending problem. Remember you get what you pay for, let the buyer beware.

No matter what search engine or web browser you use you will have problems that's something that needs to be expected...... so when there's a perfect secure web browser tell me because I don't believe it will happen during my lifetime.

NEVER trust anyone from New Jersey.

www.webrootsoftware.com is the best Anti-SPyware tool I use and it routinely blocks malware from web pages. It cheaper than Norton and Mcafee and they have a lab dedicated to this stuff...

Purveyors of malware are not the only people who abuse Google's webmaster guidelines and use black-hat SEO techniques. Increasingly, for example, greedy journal publishers are "cloaking," or allowing Google to index full-text subscription-only content that a normal Web user cannot see without paying money. Hence, the Google results for very technical search strings tend to look like mere catalogs for expensive papers from Elsevier, Ingenta, IEEE, etc. Google is NOT working to clean up its listings from these abuses; if you search using technical terms and want the best the Web has to offer without getting bogged down in commercial cloakage, use Yahoo and not Google.

Just another reason to switch to Apple. I never have any of these virus issues with OSX.

As an IT person, I smile every time I read something like this. Why do people still click on links telling them to install something when visiting websites? And for GP from San Diego, CA who wrote that people should use FireFox. The issue is not the browser it is the person using it. I have always uses IE and I have never had a problem.

When someone brings me their home computer, I am amazed every time on what is on their system and how many useless programs are installed.

It is not the computer which installed it. It is the user who accepted the installation.

People, understand and READ what you click on, and stop being so gull able.

Personally, I use Firefox with an Add On called No Script. Yes, it can be annoying to have to allow just about every site you visit but I find that it not only blocks sites from running potentially malicious scripts but also stops ads in many cases. I also use a virus scanner and connect through a router.

Please, I'm tired of hearing the mantra "switch to firefox" whenever there's an article about security exploits. Telling people that simply switching web browsers (or operating systems for you mac heads out there) will protect them is not only wrong but irresponsible. I've been a programmer for 8 years and all software has bugs and security holes. Simply changing your web browser will only create a false sense of security. I use the "Big Blue E" every day and I never get any viruses. Why? Because of the following:

1) I use a Firewall
2) I use Anti-virus software (and keep it updated)
3) I keep my browser updated with the latest patches
4) I keep my operating system patched

All these types of software packages (Anti-Virus, Browser, Operating System) imploy auto-update features which are very easy to turn on and will keep you protected. THAT's security, not hiding yourself by using obscure (i.e. not used by everyone) software. These criminals are motivated by profit and once enough people start using different software they will find just as many holes in that software as well.

Another good tip that was mentioned is don't use your computer's administrator account. Is good for adults as well as kids. Keep your administrator account separate and only use it when you need to. If you're not an administrator a virus you get from a web page won't be able to do as much damage if you're not logged in as an administrator.

So anyone who's only recommendation is to switch is not really helping you, because eventually you will get nailed.

Why doesn't someone talk to these people and ask them to stop doing this? Maybe we just need to sit down with their parents and tell them what their kids are up to? This is the information age, everyone should behave, and those that don't, should have their heads chopped off!

I really believe you (or anyone) should refrain from naming such a thing as "Google Poisoning" as that misrepresents the issue (even when you take the time to identify it as not specific to Google).

Anything other than "Search Poisoning" or something similar is doing a disservice to readers and potentially giving them a false sense of security when using search sites other than Google.

Ahhh....none of this would have happened had the internet and computers not been invented. It just goes to show that for all the good that can come of something, there are plenty of freaks actively working to corrupt it in any way they can. Amen?

I've been using Safari or Camino on the Mac for years, without special spyware/virus prevention tools, etc., and have yet to be infected and I AM NOT CAREFUL!!!!!!!!!

I hope everyone switches to Apple. then the criminals will concentrate on OSX and leave Windos alone!

It never ceases to amaze me how the black hat's find ways of doing things. This is good though, since over time, ideally, they will run out of 'low hanging fruit' and really have to stretch to do the sames things they do today, tomorrow. Don't forget to buy that domain name before it disappears to one of these guys!

Thank God that there are geniuses like Eckelberry protecting us from all of the Internet hackers out there. Thank you!

The solution is simple and two-part:

1. Apply common sense. Even the newest of novices can use common sense when web browsing. Pay attention to what you are clicking on. Look at the top where your browser shows the URL, did it change unexpectedly? Do you really need to install that plug-in to get what you want? It's OK to say no.

2. Educate, Educate, Educate. If you aren't sure, don't assume. Remember what assuming makes of you and me? It's a sad society, but it is what it is. Make the best of your internet experience by becoming experienced yourself. Take the time to get to know how to protect yourself. No one else is going to do it for you. Be vigilant and know your sources.

Everyone has an opinion: Mac here, PC there, surf with this browser or that browser. Web browsers, operating systems; they are all subject to attacks from various persons in various forms 24/7/365. As long as you plug in and boot up, you're susceptible. There is no such thing as a "sure thing" except that if you are not careful you will get burned.

@ SEO practitioner:

SEO may be legal, but that does not mean that it is legitimate. It is a form of cheating. Google is used by many consumers because their basic way of working is fair. A site that draws more traffic is likely to contain good content. If you get your site up higher than it shouldbe based on it's true number of hits, you are simply cheating. You are correct that it's up to the search engines to guard their customers against that, but it stays cheating. Nothing else than that. If you have nothing else to offer than a generic term like 'weddings', your company probably doesn't have a lot to offer either. I feel sad for all the customers that you duped.

----

Than in general. The government can do a lot more in fighting SPAM, and stuff like this. It's a matter of going after the big abusers of these tactics. Sew and fine the living daylights out of them. Name and shame them. It will deter others to do the same. I don't think a lot of new legislation is needed. Just tougher (any?) enforcement of existing rules on fair business practises. The government should work together with search engines here to catch the bad guys.

No, that's not helping the search engines, it's protecting the public against cheaters and weasels who can't grow their business on decent merit.

I always love these debates because you can clearly see why groups like the RBN are so successful. Most people seem to be convinced that since IE is the most popular, that's the reason it's hit. If Firefox becomes the most popular it will be hit...and so on and so on. Not sure how many people here are IT pros but if you recognize my reference to RBN then you know what I'm talking about. I work in computer security and I'm constantly researching the trojan tools like Mpack which are used to create the malicious websites discussed. The reason IE is hit is not just because it's popular, but because it has so many vulnerabilities that are unique to IE. "Alternative Browsers" like Firefox don't use the same technologies as IE. I would love for people to take the "Pepsi Challenge" with Firefox. Scan your computer with an online virus scanner to make sure your system is clean before you start. Try Firefox for 1 month then scan you computer again for virus/spyware. Then try IE for 1 month then scan you computer for virus/spyware. Go to any websites you want...See if there's a difference!

Yes, John Doe of Omaha. Obviously if the world did not exist, there wouldn't be any problems with the world. Therefore we should destroy the world! It's the only way to be sure. :)

Using Firefox isn't the answer for this problem. This is a unique, targeted attack on the Google search results, which will be the same whether you do the search using Firefox or IE (or Opera or whatever).

That being said, using Firefox with the No Script add-on is a great idea. No script adds an extra layer of protection by stopping certain scripts from running automatically, including those that would install malware without your knowledge. The user has to give permission to allow the script to run. The only downside is that you do have to go through all the websites that you normally visit to grant permission in order for them to work (I keep all of the 3rd party tracking scripts block, like doubleclick).

I'm not aware of a similar tool for IE.

I switched to Mac in 1990 and have never used anti-virus software and have never received a virus. As for the comments being left on sites that contain links to the poison sites, I'm here to testify! I run an online database and I have been clearing hundreds of fake entries every single day. Today, however, I've change the way the form is filled out in the hope that whatever "bot" is doing it will now be confused.

re: "Does this also apply to the Yahoo search engine?" No. Is perfectally okey to use Yahoo engine. Also, i half money in nigerian bank, many many millions, and need help in gertning it out of county. will share with you equilly. send me social security humber & bank account so wei can......

I have to save Amen to education. I have literally HUNDREDS of clients who tell me "Oh, I clicke dthe link"

As a Data Security Expert, all I can say is "The best defense is EDUCATION!!"

As I tell my clients, you take the time to learn how to use your TV, your cell phone and all the features of your car.

If you follow the speed limit, and the street signs, you should be able to drive ok.

Treat your PC and your internet connection the same way. Make it your business to understand it!!

SWITCH TO APPLE. NO VIRUSES!!

Curse you, Al Gore, for inventing the Internet!

Can we please stick to the topic at hand? I'd like to learn about these pc virus threats and the targeted search engines. Please direct your petty 'Internet Explorer vs Firefox' discussions to the appropriate forum. Thank you kindly,

For anyone who thinks that this is still just kids and geeks with nothing better to do...it is time to wake up. This is a huge big business criminal effort, well organized and out to make money. Think the old mob and then double it.

You macheads...the latest trojan DNSChanger version runs on MACS if you had not heard, as MACS can market share, you can be sure the number of spyware, viruses, trojans and such will increase as well. Same is true of any browser engine...as it gains market share, it will be exploited. And yes, it can be exploited, I've been in programming for 25 years now, and even today, the "big iron" machines are sometimes subject to attacks.

Keep your anti-virus software up to date, and don't truct just one package to keep you safe. Webroot and AdWare run quite well with Norton and McAfee, as do several others, and give you the added protection of doing double scans, with different approaches to ensure your machine is ok. Even then, you may end up with problems, so change your passwords on key things like banking, credit cards, e-mail regularly(most corporations require you change passwords every 90 days at least, some more frequently). Use caps and numbers in passwords. Is this a lot of trouble? Yes it is...but it is more trouble and pain to recover from identity theft.

IE only appears more vulnerable than other browsers because most browsing is done on IE, so that's what the malware writers target. Other browsers have their vulnerabilities that have not yet been fully exploited. A well protected IE may be safer than another browser because not many security software applications protect browsers other than IE.

Wow. Now I'm scared to even search on Google. Heck I'm scared to find out whats on Ask.com!!! People, you need to learn a listen of NOT getting on websites that do not look safe. Like duh :*

"I heard rumor that there's a group redoing the web." True - on February 17, 2009 Bill Gates will cutoff all web access by browsers other than IE.

Sunday I was putting together Christmas labels and thought it would be fun to have a picture of a "Funny Snowman" on each label. So I went to Google and put in funny snowman and found a promising link. After I clicked on it a message displayed I needed to to download a program because my registry was corrupted. Knowing better I attempted to back out and couldn't. I turned off the router and closed the computer to get out. So beware, they are out there as this article clearly points out.

I completely agree with Mark. I was using IE for the longest time until IE7 starting bogging itself down. I switched it FireFox because I liked the tabbed browsing the IE7 also had but it worked better.

For what it's worth I don't use ANY anti-virus programs, put my PC on my router's DMZ, and am bad with patching. How many times have I been infected in the 10+ years I've been online? Once. Just once, and it was because my sister's got duped. Hard to blame a year-old girl, though. The thing people need to do is BE CAREFUL. I really doubt that asdhgakshgkasdg.cn is a safe website, anyway.

Regarding firefox (use it, don't use it) arguments, and the other side which heralds using firewalls, anti-virus updates, etc - You're all correct!

Naked firefox (just the browser, no anti-virus/firewall/protection extras) would still bring problems down from the internet if one visited dodgy websites.

However, all things being equal, Internet Explorer is more prone to such attacks, and hidden installs, because IE has built into it something called ActiveX controls - THAT is the reason more criminals exploit IE, not because of popularity. ActiveX allows for those driveby downloads of malicious code.

Firefox does not use the same codebase, and does not suffer from the Active X weakness. No, it's not perfect or impervious, but again, all things being equal, you are better off with Firefox as a stronger resistance to this garbage. Plus, it supports standard webcode better, which makes webmasters/developers like me happier (grin).

Install the firewall, update the anti virus, get the anti-phishing addins working, and stick with Firefox - should cut down to (almost) zero these types of problems.

Every form of refuge has its price.

Why is everyone so agaist the beauty of the programs, I mean, there have alwasy been hackors, some go on to computers to get rid of viruses others, well they create them. The programs are amazing, but its sad how they wreak computers. The only one you do not cause yourself is a worm, which is a very bad program, but the hardest to write. If people took the time to go into a computers programs and sort it out, instead of not knowing c++ and other basic programing languases, then maybe they could get rid of the viruses quickly and much more easily than just sobbing and saying what bad people coders are. Hackers can have issues, but they also write brillant programs. If it weren't for the Hacking mentality, you would not be typing on this computer here. Its bad to steal money and such but only black hats do that and they are rare. I am not a hacker, but they have created our spell check, our internet explorer, and how would you feel if a hacker made a program so your computer had free internet? or you had a free telephone. These programs are meant to outsmart the prevouis one, and they succeed. It is unfountaty that black hats give a bad name to programers who work hard, and find loopholes and get rid of them. You have an issue with hackors, learn code and learn basics on how to defeat them, oh wait, let me guess, your just going to complain some more about how hard coding is. I dislike hackors, but admire their programs! See thats the issue with America.We dislike inovation. Dont use the same computer for threating websites as you do to pay your bills and other personal information, keep that last computer off line or only have 5 totally safe websites on it, like your email. Basic advice ok.

The best thing to do is buy (or get off the curb) an old PC of around 700mhz or more. Most people will GIVE them away. Anything in this area is fine for web surfing. Use that machine and only that machine for surfing the web, never put any data on it whatsoever, and plan on reinstalling Windows on it once/yr. I use Ghost and it litterally takes less than 10 minutes to re-clone my web machines back to a pristine state.

Like RP above, I'm also curious regarding the aims of the perpetrators. The article, unless I've completely missed it, doesn't address this.
A previous comment indicated they are motivated by profit. If so, how are they making money?

The burning technical question: Do we blame this on George Bush because everything's his fault, or do we blame it on Al Gore because he invented the internet?

The simplest method to stop this type of attack is for Google to bias the search results with a longer term memory. This would prevent many new site links from overwhelming the algorithm. While real new links happen all of the time they do not all happen at the same time.

G'day,

I use both browers, but it seems that Spoofstick is no longer available on Firefox. IE7 does have it.

Am I in error?

I am with Mark in Farmington, UT. I never had any problems in years and ALWAYS use I.E. Of course, it also helps to have a router with a built-in hardware firewall! Get one, even if you don't need it for routing purposes.
Has anybody heard of TrendMicro with their PC-cillin programs? Better than McAfee and less costly. Their cleansing routines are very thorough. They even alerted my to booby-trapped Web pages before any harm was done.

So John, You are saying it is all my fault? -Al

I started working with Computers in 1958,Coded with pig tails and patch boards,later moved to Cobol. In all these years I have worked Security personnel Firewalls, Anti virus Software, anti addware, Anti spyware, yuou name it. one thing I have found in all these years is if you really want to break into Fort Knox it can be done. This even applies to Macheads. The best advise given is to remember anytime you go on the web (I started with the DOD Arpnet)you open yourself to attack, so watch your back and never open anything you are not sure of. Use the best anti everything software you can load (it may be inconvenient at times but it will save you a lot of aggravation and trips to the Geek shop. The Hackers get away with it because users let them. Years ago I worked with spread spectrum phones (radios, current day cell phones. You would be surprised at the number of users who think they are on a private line.
So, bottom line to stop malware, etc. EDUCATE THE USER. Most all hackers are extremely software literate, (I have met a few of these nut cases) and money is not the driver; they just love the rush from screwing up software that a group of hardworking programmers try to make as perfect as possible. REmeber there is no perfect program (Bill gates would love it) and there is no perfect Anti virus software. User just have to use their head. Ask yourself would you carelessly throw around a case of dynamite? Not quite the same, but close. especially, if your system blows up. The dynamite just might seem like a better deal.

I HATE Firefox.

Don't forget your other option, buy an Apple. Most viruses don't affect them.

"I publish and surf with Firefox ONLY."

So if no one used IE and everyone used Firefox, wouldn't these same malicious attacks just be directed towards Firefox users instead? The safety is is not in the browser but in the low usage levels.

All of you Firefox fanboys make me laugh. You trumpet on how much 'safer' FF is over IE. You do realize that FF is nothing but a glorified skin for IE, as it runs on the IE engine built into Windows, right? I have nothing against FF; just understand that the reason why IE is not as 'safe' as FF is because 90% of the browsing world is still using IE. It's like saying that driving a Ford Escort is safer than driving a Toyota Camry, because the Escort is less likely to be stolen than the Camry. You have a much larger audience with the Camry than you do with the Escort. Same with IE - if you have a chance to infect 100,000,000 million users as opposed to 2,000,000, it's obvious as to who will be targeted.

I have cleaned PLENTY of spyware-riddled PCs in my time that were using FF because people were lulled into a false sense of security and browsed the Internet with reckless abandon. The steadfast rule EVERYONE needs to follow - regardless of the browser used - is that the Internet can be a cold, harsh environment and you need to browse with care.

Amen!

What would the world be without internet?

Cite sources on roots of term "Google poisoning". Search-engine poisoning is probably a more objective term, atleast for the headline.

[shakes head]

The aim of the perpetrators is to get the malware on your computer. After that they own your machine. Ever wonder where all the viagra adds come from? Why your bank is calling about the overdrawn account? Or the credit card you didn't actually apply for? There are multitudes of "aims" mostly driven by money and greed.

Read and be safe.

Please be sure to read the article carefully before commenting. I've read at least 2 comments from knowledgeable administrators that flat-out ignored one of the key factors in this attack. Namely that Internet Explorer, without a recent patch, was vulnerable to installing software *without a possibility of user intervention*. i.e. the user never got to say 'no, I don't want to install this'.

Yes, people need to keep their windows operating and peripheral software such as I.E. patched. Yes, Microsoft does a so-so job of providing patches. Yes, Microsoft has been caught red-handed in the past electing NOT to patch a known security flaw because they didn't think it was important enough.

At the same time, there existed a critical flaw in security in OSX at release, allowing a non-administrative user to gain administrative access with literally a click of a button. Operating systems and support software will always trying to play catch up.

As to how the hackers are making money: a common means is simply a key-stroke logger. They can get information on your bank, your email, your WoW account, you name it with a simple key-stroke recorder.

The article indicated the hackers may have been in China, or at least working for Chinese interests. Anyone think that American law has much teeth in China?

The best note so far was from Mark in Farmington - don't use the administrator account for your regular work - it has unlimited permission. Set up and use a normal user account instead; only takes a minute.

Regarding SEO, there are many flavors. An ethical SEO provider will help you make your site more consistent & useful to your users and high ranking will be a result. Unethical SEO work consists of gaming the engines, or, much more common, selling a 'pig in a poke' to their customers. One scam I've seen is telling them that they have to totally violate all best practices, put everything in one huge flat directory, etc., to get good rankings. Then, when the webmaster refuses to do anything so stupid, they can blame the continued low rankings on the lack of cooperation. Caveat emptor.

The reason people are talking about Firefox vs IE is that it IS relevant to the discussion. There are definitely security holes and vulnerabilities in IE, even more than just ActiveX. Not only does Microsoft keep the best APIs to themselves for their own development, those APIs if known, can get through security like a knife through hot butter.

People are so hyped on the technology they buy, they don't want to admit that pro advertisers are capable of conning the hell out of them. Norton and Microsoft work together to sell you a problem and a solution; neither of those companies invented the technologies they sell, they acquired them by hook or by crook (See : DOS 4 and Stacker) Now, everyone go buy Vista because it is the way of the future.

Like several other people are saying, the best way to avoid this is to learn not to download things you don't know, or from sites you don't truest. McAfee has this free add-on (for both IE and Firefox) called Site Advisor (www.siteadvisor.com) that marks sites as safe or unsafe. Of course, it depends on users to rate the websites, so someone could theoretically give a lot of good reviews to a bad website. It's still better than nothing though

As the comments above show, you need to be aware of THREE factors for safe surfing: (1) which browser you use (2) that you keep it up-to-date (along with Windows itself) (3) safe surfing behavior. Ignore any of these three factors at your own risk.

Concerning browsers -- IE is more vulnerable than Firefox due to its ActiveX controls and Active Scripting (and now Microsoft has added .NET components to this already-insecure brew). Plus IE is more targeted because it dominates the market.

Alternative free browsers like Firefox still have some vulnerabilities (eg: they run JavaScript and Java by default), but their exposures are lesser.

Many fans of free browsers consider Opera the most secure. Firefox is a good choice if you want a browser that competes, feature-for-feature, with IE.

I like K-Meleon, which is faster and lighter than any I've mentioned thus far. If you don't require all the bells-and-whistles of IE or Firefox, K-Meleon provides both great security and top performance. I can surf faster with it on an old Windows 98 machine than on my latest 3.2 ghz duo with Vista and IE!

Once everybody uses firebox they will make it work for firefox too! Just be careful on what you click. What you see is not what you get.

Use Kasperski for your anti-virus software and Firefox for your browser BUT search for and install the Sandboxie extension (While still at the Firefox webpage). You will NEVER have a security problem again. :)

I would like to say that I have been online with IE, Netscape, Firefox, etc... they all have problems with their software... To ERR is human, but stupidity is universal. Read up on your software BEFORE you install anything. Isolate a folder for each new program rather than letting it all go into a temp folder. and for goodness sakes LEARN how your virus protection programs work before you trust them. I can not stress that enough. Just because you THINK they are working properly doesn't mean that they are. THERE are also virus programs out there that CAN and WILL take down your virus protection. ALWAYS keep a backup of your virus libraries handy... just in case. But ultimately no matter how much protection you have. NEVER store passwords, bank info, personal info, or anything you would consider private on your computer. They still make paper you know...

I've used Windows and IE and NEVER been hit with a virus. Why? Because I never run as an Administrator (or with Administrative privileges), and all my family members DON'T HAVE admin privileges on the computer. Any crap just cannot install itself, if ever tries. And YES, my wife and kids (and me, when I just browse) ARE NOT allowed by the OS to install anything.

I went for a whole year almost virus/spyware free on my laptop-a combination of using Firefox, spybot,adaware, avg, AND being selective about sites I go to did the trick. But one night, I let someone use it, and they inadvertently used my IE to browse and go into chat rooms...BIG mistake...Spyware/viruses galore within those 2 hours!!! After several futile attempts to clean my system, I gave up and wiped it. No problems now! And I plan to keep it that way. Careful browsing, people! Back your stuff up, and run at LEAST spyware checks. There are so many legitimate free programs out there. Use them!

For what's it worth, running fully patched xp, with ie 7 and one care. it has been months since any problems. But like was stated before, don't get simple.

One good way to reduce problems while using the internet it to create a non system administrator account. Browse the internet only with this account. This type of account can not install therefore minimizing potential harms. Use good virus protection and most of all, use the original computer, your brain.

It's amazing how many IT Pros have talked above about IE being less secure than Firefox, etc. And how popularity of the browser is not involved. I guess I've been in the business too long and remember terms like Security through Obscurity (Re: MAC OS). What it basically means is that criminals (not white-hat hackers who are doing it for the challenge) will target the largest population possible for criminal activity. If I'm a car-jacker and I have to choose between a Pinto (Firefox or MAC OS for example) and a Ford Expedition (IE or Windows for example) well I'm probably going to get more money (albeit illegally) from stealing the Expedition. So therefore, as a semi-conscious criminal, meaning I don't have to be very smart to figure that one out, I think I'd steal the Ford Expedition. So to all of you IT folks that think that Firefox is the way to go, enjoy your security through obscurity while it lasts. MAC folks don't worry, there'll never be enough of you to make it worth the criminal's time in writing malware.

Isn't this interesting that this affects Windows users only? Apple now has a 6.78% market share world wide. However Japan's market share of Macintosh computers is 60%. This explains why world wide virus outbreaks have little impact in Japan. I just switched November 30th from Windows XP to a Macbook running OS X Leopard and I couldn't be happier. Security is now an after thought. :)

I say that people got some ideas from Live Free Or Die Hard.

Run your internet connection through a router (physical firewall) use AVG or norton xcleaner. doesnt really matter as long as it has updated enabled. Set your priority level to medium. I am a heavy surfer.. I go anywhere, china, russia, japan. I never get any virus or trojans.. firefox is a joke, people who install it and cant or dont know how to use it, cant remove it.. in my opinion firefox is worse than a virus. its a propietary program.

Well, I think that this form of infection poses a pretty serious problem, especially if the infected computers are able to pass on the virus through e mails and instant messaging.

ok
first off, all of you need to LEARN how to spell and construct legible sentences...get with the program. Second, IF you are going to use the computer, LEARN how to use it. Complain all you like about viruses, spyware & the like, and at the same time argue about the OS or the browser being the problem...very intelligent. The browser is the car, the internet is the road, the antivirus is the seatbelt. what difference does the car make if you eat and hold a phone while you drive? PAY ATTENTION and maybe you will stop getting the hit. I am an IT consultant and when I teach my clients how to use the internet they do not get hit if they learn. Maybe you (whoever YOU are) should actually learn the computer instead of thinking you know everything already. Good luck with firefox, opera or whatever else you think you need to win, the incompetent worker blames his tools for the job, think about that.

Webroot -- I had problems with this. It did protect my machine as advertised, but it constantly exercised the disk drive and it eventually failed. I was unable to get any meaningful technical help from them.

Well, I have been using Firefox instead of Internet Explorer for quite some time now, and I agree that I get less spyware with Firefox!! I still agree with some of the other guys here though; it's always safe to have an anti-virus software on your computer at all times! :)

I use the Linux operating system with the Ubuntu GUI on my laptop, with the Firefox browser. I use Windows XP and Firefox on my desktop machine. I never have these problems. By now, I've had nearly a year's experience with Linux. Soon, I'm going to wipe out XP on my desktop and switch over entirely to Linux/Ubuntu. I'm told that Linux is inherently much less vulnerable to viruses than either Microsoft or Apple operating systems. The application software for Linux is almost always free (software that is fully as capable as MS Office, and can use file formats that are compatible with MS Office). I'm never paying another penny to Microsoft or Apple. Check out Ubuntu -- it's free.

Webroot -- I had problems with this. It did protect my machine as advertised, but it constantly exercised the disk drive and it eventually failed. I was unable to get any meaningful technical help from them.

I don't get it! What is the objective besides getting higher rankings for certain websites, for all these attacks?! What do the criminals gain from this -it seems like just a pure evil fetish or something?!

i too was attacked by spy shredder...and when i clicked to close it it attacked anyways to the best of my knowledge...AVG free edition quaranteened it. further and later use of google also brought about AVG detection, warnings, and healings or quaranteen...i download updates and do an AVG scan DAILY. i am sold on AVG!
paul

Use Stopzilla as a secondary sweeper to your main one. I love it and I use it to clean up after Webroot's Spy Sweeper. And as already mentioned, keep your definitions up to date!

I use a fire wall and Mcafee virus protection and I keep it updated. As far as blaming our President, can't really do that. Yes there are some things that he is responsible for, but there are also our wonderful Senators and Congressmen to blame too. I am so sik of people blaming the President for our problems. I am so sick of Demmocrats and Republicans blaming each other. If there are any Demmocrates and Republicans who read this, Grow up and take responsibility for your sctew ups and stop blaming others for your mistakes. You people act like a bunch of 5 year old kids. To those who are tired of the way this Government functions, start cleaning house and vote the crooks out of office. I plan to. I love my country and my freedom, but I can't stand it when our elected officials totally disregard what we want and disregard what concerns us. I am tired of being lied to just so they can get re-elected.

switch to firefox? if everyone switxchs to fire fox then the virus makers and others will start attacking firefox, its like the old rumor the mac dosent get virus, it does just the people who make the virus target window, why? because more people use it, same as intrnet explore, imagine if you were a hacker, you had a choice between 10 people(fire fox) or 100 people(interent explorer) obvoiusly thse people are going to choose expoloer, the only sure fire way to aviod these virus and others is to just not use interent, other then that keep secruity current, and up to date, and to pay attention to where ytour going

Firefox, IE, Netscape, Opera, Safari, etc. are all just windows to the net. They just display whatever it is you are trying to see. Some are better at this than others, and some are incorporating their own 'protection' within the apps themselves. Still, not one of them is going to keep you from doing something stupid like installing some app from the net (which is where the problem lies). Quit installing net cr*p and you, friends, will most likely subvert all malicious code. I will stick with using Internet Explorer. You may use whatever browser on the list above you please. Firefox is fine, I guess.

I'm in agreement with JS the I.T. from "The Great White North". IE is a great search engine; its my favorite and I never have any problems because I look before I connect. Face it people are going write viruses, worms, and trojans from now on. There is two ways to stop it:
1. Shut down the internet. (Of course we wouldn't be blogging this then would we.)
2. Spend some time with a good book called Windows XP Inside and Out or other OS manual and learn how to operate your computer.
I see hackers, crackers, and phishers as the bell curve of computer usage. If your dumb enough to download from an unknown site, open an e-mail from an unknown source, or believe "Bonsai Buddy" will speed up a computer you deserve what you get. I'm not sorry at all for those people who blow nine grand on an alienware powerhouse only to have run slower than a slug on salt.
People quit whinning someone needs to do somthing, we already have its called antivirus software. Take personal responsibility and learn how to use it, go to sites like MS update and make sure your S/Ps are up to date, if you use MS Office you need to do the same.
You made the choice to enter the world of the Internet (or as I prefer wired world) so its up to YOU! Not the government, not the software companies, not the computer manufactures...NO! Its all up to you.
My Granny always said, "If you can't take the heat get out of the kitchen!"
We'd sure gain a lot of bandwith if all the Myspace posers, I.M. mama's boys and porn addicts left.
of until and trto do > from

I was using firefox with XP and had many problems until I started IE7 with Vista and AVG free and only had 1 problem which was resolved quickly.Why am I so lucky? Could it be just by chance or might it be a common sense approach to the ways and means of safely operating within an atmosphere of deceit comprised of a substantial number of fecal minded enterprising deviates? I don't know the answer, but I doubt that it's luck. Keep your eyes wide open and your intuition intact, and you may be able to stay a step ahead of the moronic entities that corrupt all venues of a civilized society regardless of what OS you may use.

Why is this called Google poisoning? Really! This affects every search engine, just another ploy by MS to tarnish a competitor's name. Read the the articles carefully from MSNBC! MS is a partner and you'll always find the same censored washed down one sided crap you'll find on any large corporate news site. Read between the lines.

Why is this called Google poisoning? Really! This affects every search engine, just another ploy by MS to tarnish a competitor's name. Read the the articles carefully from MSNBC! MS is a partner and you'll always find the same censored washed down one sided crap you'll find on any large corporate news site. Read between the lines.

I've installed SpywareBOT to identify and clean the parasites, also Norton. At first they collided and weren't compatible. Seem ok now. What do others think about SpywareBOT? I first learned about it on a computer show on Talk Radio.

All the software in the world will not save you from idiot viruses, I surf ALL over the web, in a wide range of topics; and, my only real piece of advice is this: when you get infected....STOP WHAT YOU ARE DOING... do not turn off the computer, do not run ANY anti-virus software, simply, go to windows system restore and restore your computer to the previous day....really; nuff said.
I do computer repair and system building for a wide variety fo custumer types, from local users to corporate users, I tell all of my custumers that one simple little fact; stop what you are doing and restore your system to the previous day, if you wait or dink around your system restore will be corrupted also; and then, you get to bring your machine to me...and... pay me to clean it up; when most of the time I could have walked you through it over the phone at no charge at all.
Do not listen to overpriced technicians, glorified sales people at all the major computer stores, or rely on stagnant software companies to give you advice; instead, listen to the few of us out here that don't rip people off; and, that do this for a living.
As for anti-virus software, I don't use any of the ones mentioned so far.
nuff said.
Happy Surfing

Great comment from JS, Toronto, Ontario, Canada, to sum it up, don't be a dupe, watch what youare doing.

two comments: one, most people are too lazy to read a manual anymore. they want technology that is so advanced it can fix itself all of the time. they refuse to read the manual for their camera, phone, car, or most other gadgets and if they have to they return it because they usually assume that it is broken. thus never getting the full benefit of the item and wasting the years of innovation, design, and marketing etc. put into it. they also want their technology to replace itself after it becomes obsolete, preferably in the form of a coupon...

two for those of you that believe that the "alt" browsers to IE are invulnerable consider the economic principles that others have mentioned of market share and the profit motivation of these black hat coders. as more users enjoy the alternative browsers so will the coders who like to bend the rules, break the restrictions, and use their Iphone with any carrier... these people are motivated by the thrill and the desire to make money by creating a unique program, that may or may not be used later in the form of legal and/or personal use programs. simply put if more people use os "x" there will be more black hats trying to bust it wide open. come on people there are more than 6 billion humans on the planet do you really think that just because you use an os with only 5% market share that you are impervious to virus and attack (hint answer=false). fyi 5% of even a 1 billion person market is still 50 million.

WOW,1st it was "The garden of Eden",then libraries,movies,public schools,TV,etc. When will we realize there will always be the bad guys ready to corrupt a good thing? The real "bad guy" is the one who ignores the problem and lets them get away with their wrong doings. I say thanks to all you diligent watch dogs out there who warn us and those of us who,listen,respond and WATCH OUT!!!

Thank you ALL for your comments. It's been VERY Educational!

There is a neat little program called Mamutu that is published by Emsisoft out of Austria. They are the makers of a-squared antimalware Guard.

It is a behaviour analysis background IDS guard that is capable of detecting new viruses and trojans before they are downloaded from a malicious site.

It is not a cure all but I have seen it do some impressive things during beta testing.

Good story.

If it weren't for viruses, there would not have been any virus protection software. If there were no hackers, your OS/software will never get better. So chill out. It's the way of life. Just accept it

They write the malicious code targeting the largest vector ie. why write a virus so you can infect only 10% of the users on the web when you can write one which infects 90%. same reason why windows is deemed so unsafe, if all the coders out there spent time hacking away at linux instead of windows we would see a big change in which one was more secure. the internet will never be safe, live with it, educate yourself, and be careful, if your not sure click no, if you really want to click yes then create a virtual pc and surf from in there, then when you are done you can revert the virtual pc back to it's boot state and log out.

Here's an easy one to avoid this problem, buy a Mac. While I know Macs can be vunerable to these types of things, it RARELY happens, if ever to some Mac users. I know it hasn't happened to me yet.

Fools...

You will fall for anything NSA felons do!

The number one malicious crackers online is the US Government.

They generate more DOS attacks and install more spywear than anyone!

BTW... my 8 year old computer has only seen one virus...because I visited Google once when their server was infected. I have never used AV!

IMO... there are a few AV companies selling products that are complete frauds. (They leave an open portal for NSA felons to exploit!)

When will US Patriots lynch Micheal Hayden?

NSA code crackers in their efforts have revealed the details of the location of every Root Server in the USA...

IMO...they are a danger to National Security! They are also working WITH China as a model for controling internet content in the USA in the very near future!

Good article.... but put the blame on the real BAD Guys...

And they are not kids! They are felons with security clearances!

On another tack -is this a conspiracy to slow down the Chinese economic growth - why arent the bad sites latvian or polish or british etc.

HERES AN IDEA......TURN OFF THE COMPUTER AND GO OUTSIE....AND TAKE YOUR KIDS WITH YOU.....

All You mac heads......
When The Apple II C was popular, so were Apple Virus's.
Then Came PC's and PC's got Virus's.
When Microsoft moved 100 fold infront of Mac, The Virus writers had someone to mess with now, that they can affect a greater majority with there "Programming Saavy virus writing styles".

Why bother writing code thats going to infect a small base of computers when you can write code tht will affect 98% of the worlds installed base of computer???

I don't even use AV software, and I never get a virus. OK, so I am an experienced user and know exactly what to stay away from.

Never click on "Install This blah blah, Active X,Picture Viewer, MS DHTML, Video Codec, or anything else" from any website you do not trust.

If you typed in the link to your bank manually and it says you need to go to Sun to install Java, then thats going to be ok.

However, if you received an email from your bank stating you need to go install Java from Sun and they provide all the links you need in the email... THATS PROBABLY A PHISHING SCHEME!

You really need to pay attention to your computer. Especially if you go to a website that makes you feel quezy about the possibility that it's a bad site... ie Warez Warez Warez... Download here, Click Active X Install to continue..... Whatever the active X is, they are going to be installing an exploit, even if it is Microsoft DHTML embedding.

Be Safe, Don't be Stupid when surfing.

Will the theat of death keep these criminals out of mischief? Just a thought!

THE FACT THAT SO MANY "COORDINATED" ATTACKS COME FROM CHINA SMACKS OF "GOVERNMENT" RATHER THAN CRIMINAL INVOLVEMENT. THE REAL TERROR NOW IS HOW OUR ADDICTION TO TECHNOLOGY MAY BECOME OUR DOWNFALL.

I had this happen to me about a month ago - even with Norton it downloaded onto my computer and my "new" home page was the one where you see about four fake protection programs and your computer won't work right. After trying several free antispyware programs, I found Super AntiSpyware for free and within minutes the program was gone and my computer was fixed. SUPER ANTISPYWARE is free and works great - I kept it on my pc and it still keeps bad programs off now. That is the best advice I can give for someone who accidentally caught this nasty virus.

1. Firefox is annoying. The crap that I was getting with Firefox, and all the extra crap I needed to keep it running at IEs pace negated the download.
2. I just download my updates, keep up with the latest versions, and don't turn off the pop-up or phishing blockers on IE 7 for anything but specifically trusted downloads, or web pages.
3. Avast! rocks!! Get it. It's free. Send them a donation if they do a good job for you!
4. I just don't click on it if it isn't what I am looking for. If a box pops up asking you to download something, and you weren't looking to download something...DONT! If you can't get the box to go away without clicking ok, dont be lazy & just click it anyway, control+alt+delete, and close the running programs. Start over. It will take what..10 extra seconds?
5. I look at the address bar if something seems unfamiliar. If the main part of the web address doesn't say the site I meant to be on...I close it.

A little bit of attention and thought helps go a long way to keep you safe.

Use firefox browser,not internet explorer,IE is dangerous. Kaspersky anti-virus, you also need two
anti-spyware engines, ad-aware se pro,xoftspy pro.
If you have these you will be very safe opening sites
on the web,but always remember to delete all cookies
when done surfing, spyware hides in temp files.Webroot
window washer is also great too have.
The most infected sites are porn, if you check out
naked woman you will get something.

P.S. Kaspersky is 10 times better than trend-micro,norton,avg,black,mcafee, bitdefender,nod,
panda.They have the fastest detect time,yes its proven.

I use a simple expedient to avoid giving malicious sites a pathway to my computer. In IE, I put all of my security settings to the highest possible state for the Internet Zone. This prevents scripts from running, anything from being installed, and disallows downloads of anything but text and pictures.

Then, as I run across sites that I can trust, I add them into the Trusted Sites list. Over time this list has grown to include a couple dozen domains. Now I hardly ever have to do this anymore, as all the sites I visit regularly are now in the list.

It's essentially a "white list" strategy for surfing, and it's worked fine for years -- haven't had an infection since I don't remember when. I still have an AV software running, but it's been silent as a kitten for as long as I can remember.

After reading some post about firefox and IE.
Internet explorer is junk just like the rest of microsoft, vista is junk,it is made for a monkey to use.
I can run vista for free, I don't because it is junk.
I cracked vista before it was out and after all there patches I still have it cracked. Windows firewall is junk, use a different firewall. The person who sufs the web ,for the most part will only get spyware,and not so many virus's. Not too many hackers will waste
there time with a person surfing,they are working on
servers, they work on mass, not one little person
surfing. When you get an e-mail saying your online bank account was accessed and you need to fix it,
and you go to the site, this is where you will be giving a stranger your personal info, never do this,call your bank.

I agree with HS, SEO is a legitimate (and often necessary) Internet marketing activity. Nepkarel, what you are referring to is known as Blackhat SEO or Search Engine Spamming, and involves using banned practices (like those referenced in the article above) to basically "cheat" your way to the top. Legitimate "Whitehat" SEO practitioners do not need to resort to cheating to get results, they follow the rules laid down by Google, and can help a web site to do well naturally for searches relevant for that site.

I also would like to point out some technical corrections to an otherwise fine article. It appears you were relying on quoted "security" experts for authoritative information about search engine technology.

First off, I question the accuracy of some of the numbers presented, and whether the size of the problem, while serious, was somewhat overblown. The article initially refers to 40-50K web PAGES, but then later states "By posting tens of thousands of Web sites simultaneously", and then later, again saying "40,000-50,000 fake Web sites".

Based on the numeric web page URLs shown in your graphic (186.html, 579.html), it appears these sites likely had at least a thousand or more web pages apiece. If each of these sites had a few thousand pages, it would only take a dozen or two web sites to produce the 40-50K web pages first quoted, a far cry from the tens of thousands of simultaneous web sites mentioned in the article. With dynamically generated pages, all it would take would be for them to bring up a handful of sites at the same time.

Absent evidence of a much more competitive search, I would also have to seriously question Eckelberry's assertion that these criminals were "SEO Gods". The example graphic shows a Google search that only returned about 90K results, and these criminals were using search engine spamming tactics ("cheating") to get there. A good SEO could easily get to the top for such a relatively uncompetitive search in his sleep - and without having to resort to spamming to do it! (The example shown was also specifically limited to only show Chinese sites, something that was not made clear in the article.) Even without the site:.cn, none of the searches it appeared they were targeting required "God-like" talents, they seemed to be going after the easy low-hanging fruit.

Indeed, far from being the "SEO Gods" Eckelberry asserted, one of the spamming techniques the article stated that they used (cross-linking all the sites) would have actually made it incredibly easy for Google to identify and remove all of the offending web sites!

The "cloaking" reference is likewise inaccurate. "Cloaking" (as defined and despised by Google) refers to the banned practice of having the same URL present different content to the user than to the search engine, NOT tricking the search engine into displaying the wrong URL. While doorway pages and re-directs are also possible, they are not the same as what Google (and the rest of us) consider this search engine term to mean.

I am also concerned that your article seems to imply that Search Engine Optimization consists of nothing more than gaining links - ranging from "legitimate linking" (good) to comment spamming and creating hundreds of interlinked fake web sites (link spamming/link farm, bad). This is a common misconception that is utilized by some SEO spammers to convince the unwitting to retain their link spamming services (claiming "every other SEO does the same thing we do"), and I am saddened to see your article perpetuate this myth. Legitimate SEO entails quite a bit more than that, and quality links (not spam) is only a small part of the equation.

With regards to the PC security question, including the common-sense approach mentioned of "watching what you click", I would also suggest an antivirus program (like Avast or AVG), antispyware programs, and most important, a good firewall that can block both inbound and outbound requests, particularly if you are on a high-speed connection. And if you are using a DSL or cable "always-on" connection, be sure to turn your PC off when you are not using it!

try mcafee site advisor! it will warn you ahead of time that the site is unsafe.

Why don't we take some sort of economic action against countries like China and Nigeria that constantly pull that crap on us and the rest of the world? How much money, time and productivity are these jerks causing us in the rest of the world?

HELLO why run an operating system that is so vunerable
I use Linux when I go on the internet and Vista when I stay local.

I was doing a search for my cable company to pay my bill online. I have paid my bill this way for months. The third website listed a suspicious looking url but the website was highlighted indicating that I had been on this site before, so even with the weird URL, like a dummy I clicked on it. The first thing I got was a pop-up saying that my computer was being scanned and almost demanding that I download new security software. I clicked the no button and the Norton and Webroot Spyware packages blocked the download. I am always cautious with suspicious looking URLs but the highlighted webpage title fooled me.

How does a discussion about viruses turn into such a long, boring, painfully drawn out discussion about firefox, i.e., and Mac? You all sound like rednecks comparing brands of pickup trucks...only nerdier.

Firefox will always out perform. Why? Because there are literally hundreds of developers. You can bet they will respond way, way, faster that M$.

Education is always the best defence against these kind of things. If more people know what to look for and what to do and what not to do, these 'bad guys' will not get so many 'victims'.

I use Google for my searches, but my searches are not so obvious like 'funny doggy pictures' and things like that. I'm more precise in my searches to get the things I want. I also always check the URL to see if the site looks reasonable.

Computers now run the world and our dependance on them immeasurable. It's time to make penalties for cyber crime meaningful, like life behind bars.

In the end I believe that if the government would put a much better effort in finding all these hackers and punish them harshly enough to set a public example and the creators of all these surfing programs would spend the correct amount of money to design and implemente the evasive measures needed, we would not see this problem.

McAfee site advisor, a free plugin for Internet explorer and FireFox is a good first defense against these sites. It's not perfect but I feel more comfortable about what sites are safe and which ones to avoid.

Listen, I am a hardware/software guy and I am only gonna say 1 thing to you all. SPYBOT S & D Tea Timer.

Firefox, IE, Windows, Mac, & Linux...it isn't the system - it is the operator! As mentioned in an earlier message WE THE PEOPLE need to know what looks "safe" and what looks "bad". Most of the websites in the USA do not use country codes (.tv, .ca, .cn, and .ve). Realize that a website with a country code is usually not a USA website.

more american fear mongering...... Gore, Bush are idiots....stay out of the arctic!!

Ans.for John Doe,If you had a product for sell (antivirus protection) & no one needed it,how long do you think you would stay in BUSINESS?If you create a NEED,even you can figure out the ANSWER to this story.

Firefox??? All you Firefox user's better take a look at it's record. In the last 12 months it has had nearly double the vulnerabilities of Internet Explorer. There's a new version out almost monthly. Firefox users should check for updates.

So I imagine the virus people are into anti viris offers big time, maybe even posting here to get you to go to bogus sites.

This happened to me recently. SpyShredder is horrible. My husband was doing research for his homework and was forced to install this program. First it runs a scan of your computer and tells you how many problems you have (probably all caused by itsself)and then when you click "Fix Problems" it asks you to buy the software. I didn't know this was a virus, I thought it was just some really annoying SpyBot destroyer program, but luckily I was not dumb enough to pay. I uninstalled the program 3 times but it kept coming back. It messed up my computer by deleting basic functions (like being able to change my desktop background) and deleting my AVG Antivirus. My brother finally got the crappy thing off my computer, but I have to transfer all my files to a new profile because my other one is permanently ruined. Also, I have to buy a new Antivirus! I still don't know where we got SpyShredder from, but if I ever meet the people that made it . . .
You would think that people with that kind of talent would use it for something good, like making terrorist sites crash or hacking into porn sites to turn all the pictures into harmless photos of kittens and puppies. (Now THAT would be fun!)

You know, i see it all the time. People blame what they don't want to Secure on something else. I use IE and from the inititial turn on of my machine i've set my IE browser and installed Spy-Bot and Ad-Aware with Anti-Virus to Scan All Files. I get tracking cookies one time and then type in the Restricted Sites. I hate lazy people who don't want to learn how to protect themselfs from these problems and also not running the Firewalls. I've seen and heard of all those computers that are infected and aren't online or put up cause of laziness. All still infected, don't want to spend the money to fix them. I have no simpathy for them. Learn to be a SAFE SURFER. Ask a friend who knows your System. Come on people STOP blaming everyone else. Oh, and all browser's are about the same. I've been running my system for years without re-installing it and i'll bet my system is clearner than yours.

what exactly do these guys 'get' from infecting computers? Is there money to be gained from this? How?

Grab yourself a Linux disk and load it up. Most of the spyware, virus, etc out there work on Windows. Download a free version of Linux, I suggest Ubuntu as it is very close to the windows look, and your problems are solved.

All the functionality with none of the issues. All hale the penguin...

To "Just sticking up for advanced coding" Sorry kid, but many of us are adults with full-time jobs and families and other resposibilities, and we don't have the time to learn coding. Many of us don't have the funds to purchase separate computers, either.

Regardless, the criticisms here are not of hackers, but of creeps and crooks who use computer programming to steal from people or otherwise harm them.

Eternal vigilence is the price of freedom. This pearl of wisdom was granted by one of the forebears of this country, and it yet rings true today.

Yes, in a perfect world there would be no evil, and no one would try to take advantage of others. We wouldn't need anti-virus software, software and hardware firewalls, and anti-spyware programs. And, we wouldn't need to educate ourselves about the benefits and risks of technology and services. But, that world doesn't exist yet, though we should all strive to make it a reality.

Instead, people could shoulder more personal responsibility for what happens to them and take steps to protect themselves from malware. Take steps to reduce your risk as much as possible. Forewarned is forearmed!

the reason hackers keep making these spoof websites is because the programs that they install on ur PC then take personal details to allow them to steal your identity and ultimately your money they could use your details for false bank accounts and make loads of money. hacking and identity fraud is a multi billion dollar industry

I've been working with computers since the days of wooden chips and iron men, about 500 years or so. :)

Seriously, I did start in 1979 and have seen computers from paper tape and punch card programming to soap, xml, web services, etc. People who surf the web not knowing what web site they bump into and what is possible from that web site is along the same lines as street racers who race around the streets, blindly ignoring warning signs and causing potential harm to others.

Here's a question you probably haven't heard. Do we need a drivers license for using the internet?

do not browse thru any chat/game sites. do not waste time browsing thru "sex and porno" sites.
use your computer for some good. and have a good firewall and anti virus program running 24/7.

I've been working with computers since the days of wooden chips and iron men, about 500 years or so. :)

Seriously, I did start in 1979 and have seen computers from paper tape and punch card programming to soap, xml, web services, etc. People who surf the web not knowing what web site they bump into and what is possible from that web site is along the same lines as street racers who race around the streets, blindly ignoring warning signs and causing potential harm to others.

Here's a question you probably haven't heard. Do we need a drivers license for using the internet?

Gol' dang them malicious China-men! Why haven't our great leaders named them as well to the "axis of evil?" Between these URL's and the lead-painted toys and the "date-rape-drugged" beads...could it be more obvious they're out to GET US??!! Okay, I'm kidding...this has been a very eye-opening thread. Clearly, safe web-bowsing is a science in itself...word to the proponents of education, and thanks for the advice!

Check out the website pchell.com full of informative info about viruses, malware, spyware, etc.
Fixed my pc with info found on it, even after HP help services failed twice.

I have TrendMicro and PC-cillin and got infected anyway. This software did NOTHING to stop the attack, nor did it warn me something was up. Norton seems to be more effective at blocking and preventing the attacks. But, I'm just a novice...and don't know a heck of a lot.

Yes, everyone please migrate to Firefox so they'll start writing viruses for it and make my IE safer. I love to use IE and it would be even better if all the "Cry Firefox and let loose the dogs of Open Source!" fanboys would see that popularity, not "superior code", is what makes a system riskier to use.

Anybody heard about Dr Watson Postmortem Debugger?
Seems thst it stops my computer when Iam doing some program or just suring the internet.

Apple and OS X are really no better than Microsoft or Windows in terms of security. Hackers simply target Windows users because there are ninety-five of them for every OS X user; they can do the most damage that way. I have two new Macs and several Windows machines. (My favorite combination is Windows XP on my Mac Pro; I'm using it right now...)

I use IE on my Windows machines and Safari on the Macs, and never get "infections" on any of them. My daughter, on the other hand, by careless surfing and installing junk software, has managed to get her Windows machine so infected that it would no longer boot properly, on a few occasions. I have since switched her to our new iMac and severely locked down her internet privileges. No problems since.