Calling all security boffs

[Grep]

So anyways I was googling the other day as a client called in saying her powerpoint presentation had crashed, so i was just checking on the max size of powerpoint.

I clicked on the second link thinking nothing untowards and poof I finally found a link on where people get this damn antivirus/malware 2009 crap. I tried opening it with a number of browsers and found that only Chrome didnt get infected until yesterday where it fell prey.

I then tried which AV's actually blocked the linkage, tried AVG/Avast/McAfee/Trend and was stunned when Nortons actually blocked it. I then mailed the webmaster of the domain who said "thanks" and still to this day it remains there. I am toiling with the idea that it is a javascript in the linkage but cant be certain, I see its running on a Slowlaris box, so I take it its not an IIS issue. Any idea's?

http://www.google.co.za/search?hl=en&q=maximum+size+of+powerpoint&btnG=Google+Search&meta=

the PPT FAQ is the linkage.

 

[gregmcc]

If you go to the site with FF it warns you that the about the site:

Reported Attack Site!

This web site at forcedscan.com has been reported as an attack site and has been blocked based on your security preferences.

Also look into using noscript with FF - it blocks all those dodgy script from running.