Very Bad Web Page – Kill Your Browser!

If you see the web page below on your computer, do not click anywhere on it! It will also talk to you and say your computer is infected. Do NOT call the 855 number given! Do not believe that it comes from Microsoft! You won’t be able to close the window. It is trying to infect you with a virus.  Immediately use control-alt-delete to bring up Task Manager and kill your browser.

Do the same thing if you see this dialog:

Mary got there by clicking PayPal in a Google search results page in what was apparently a hacked PayPal ad on Google. I tried in both Chrome and Firefox and was also misrouted to this malignant site. However, the same ad still shows up on Google Search and now leads to PayPal as it should.

Hopefully there’ll be some explanation from Google as to how this could happen. However I cannot be sure that this was not a hijack of a DNS server somewhere in the lookup path. I also don’t know that PayPal ads are particularly targeted. It could have been whatever ad Google served first would have misdirected to the evil site. Be careful!

If you are with law enforcement, the web address displayed still responds. That may be a lead.

UPDATE: The malignant page is hosted on Amazon's AWS according to a lookup of its IP address. I've notified the abuse email address at Amazon.