Urgent - a Google search sabotaged with Trojan Horse Virus

[aperey]

jkomp suggested I post here in the security watch forum. I posted on Dec. 24th in the Google forum.

This is what I wrote:

I have just written to Google security. Can anyone please advise what else to do?

Here is what happened: Someone has sabotaged a Google search and infected it with a virus. When I searched for this key phrase, with quote marks around it, “friends of Aesthetic Realism” I got a list of 18 fake websites (and one real--my own). Two of these fakes released a Trojan Horse Virus when I clicked on them. More of them probably do too. Some of them are porno. (You get legitimate results when you search without the quote marks.)

Fortunately my security system caught both viruses. But a lot of people will get hurt if their security protection is not adequate. This sabotage is definitely illegal, isn't it? It is not only ugly and intended to defame but it can wipe out people's computers. Very malicious!

The first fake site I clicked on was this, and the click released a Trojan horse so be careful:

Best Scoures : tv show friends, free classifieds
boston, marriage ... Remembering the cryptic show
girls and cars of the vaporized friends tv show
joey, I prostated myself before the friends of
aesthetic realism countering the ...
http://inggrisindonesia.com/tv/show/friends/
- Similar pages

I was redirected to another URL that released the Trojan Horse virus. The URL was this: http://284b.com/inst/x/index.php?id=...Sn3p4rQUi6a1O7

The second URL that released the same Trojan Horse virus was this:
http://284b.com/inst/x/index.php?id=...Si5C2CrUTqV6p4

The web page that http://inggrisindonesia.com/tv/show/friends/ points to has faked keyword results and 20 URLs pointing to advertisements.

The short text string “friends of aesthetic realism countering the lies” was incorporated into each of the 18 fake results. And none of these fake results has a Google cache.

My security system gave this message identifying the virus.

Event: Virus Found!
Virus name: Trojan.ByteVerify
Action taken: Quarantine succeeded:Access denied
Date found: Friday, December 24, 2004 10:45:32 AM

How can I find the culprit? How can I can get these hurtful false search results out of the Google system?

Sincerely and urgently,

Arnold Perey, PhD

[minstrel]

Didn't I just read this in the Google or Search Engines forum?

[mikmik]

Yes, I believe so. I could tell because you replied, if I recall.

[aperey]

I was advisted to post to this form too as the people most interested in security visit it and they might be able to give some advice that others couldn't.

AP

[wenwilder]

aperey thank you for re-posting it in the security section. Information like this, while applicable to the google section, is valuable in this section.

[minstrel]

That may be. But there are now two threads with identical titles and most of the informative replies are over in the other thread, not here.

Seems to me it would make more sense to decide where you want the thread and merge them.

[wenwilder]

Perhaps. At this time and point, things stay as is.

[minstrel]

Okay. You da man.

But anyone who is interested in answers to the questions posed might be advised to go look for them over in the other thread, especially since the link from Page One points there, not here.

[aperey]

Thank you, I will merge them. How to do this?????

Regards,
AP

[minstrel]

You can't,aperey... only a forum moderator or administrator can do that.

[mikmik]

Aww, c'mon!