I ran the url through an on-line checker and it came back as benign. It
utilizes an html META refresh to redirect you to Google. This would be
readable in the code of that web page, but the redirect is set so fast,
you don't even see that page. I think someone was just seeing what they
could do. The particular worm was used, a while ago, to deliver you a
false virus warning with a recommendation to download and their virus
protection app. That app, in turn, carried a full-blown virus.
On my computer, the META refresh would still work, but the worm couldn't
get to me because my computer has probably been long immunized for it. I
use "Spybot Search and Destroy" for that sort of thing. It's one of the
best, and its free. Other than that, I'm armed to the teeth with virus
protection and behind a firewall.
On 1/23/2011 2:13, Guillermo-Sven Reher Díez wrote:
> Great God! I was sent to the Google.es page, that surely must be a bad sign. But probably better than google.cn.
>> Date: Sun, 23 Jan 2011 16:30:48 +0000
>> From: [log in to unmask]
>> Subject: Re: [BRITARCH] WOW
>> To: [log in to unmask]
>> I was using Firefox, it just took me to the Google UK home page.
>> Sunday, January 23, 2011, 10:57:26 AM, you wrote:
>>> Urgent to all.
>>> WOW link will/tries to install a Trojan if your computer is un-protected.
>>> On 23/01/2011 06:53, DEAN PATON wrote:
>>>> I'd not click on the link if I were you, looks supiciously SPAM like.
>>>> From: British archaeology discussion list [[log in to unmask]] on behalf of Doug Weller [[log in to unmask]]
>>>> Sent: 23 January 2011 06:00
>>>> To: [log in to unmask]
>>>> Subject: Re: [BRITARCH] WOW
>>>> What am I missing? All I see is google.co.uk
>>>> Doug Weller
>>>> Director/Moderator The Hall of Ma'at
>>>> Doug's Skeptical Archaeology site: http://www.ramtops.co.uk
>> Doug Weller Moderator, sci.archaeology.moderated
>> Director The Hall of Ma'at http://www.hallofmaat.com
>> Doug's Skeptical Archaeology Site: http://www.ramtops.co.uk