PDA

View Full Version : Scam Site targeting Holdem Manager Users?



carl
01-07-2009, 03:58 PM
This post isn't 100% thought through it's meant as quick information since the possible-scam-site is the 2nd search result in google right beneath the original HM-forums.

While setting up my Holdem Manager HUD for PokerStars, I was doing a google search for:
seating preferences holdem manager

I middle-clicked(to open in a new tab) on the second search result which is called
"Setting your seating preferences in Holdem Manager"
http://img89.imageshack.us/img89/2591/screenshot1ne7.th.jpg (http://img89.imageshack.us/my.php?image=screenshot1ne7.jpg)
It is a website on the domain simoncaley.com

Then a pop-up opens which asks if I want to install some-antivirus-proggy-2009 which I canceled and the cancelling of this pop-up opened the site:
pc-security-scan.com

One middle-click on this Simon-Caley site resulted in 6 entries in my browsing history.
I reproduced this here:
http://img175.imageshack.us/img175/9373/screenshot2hy7.jpg (http://imageshack.us)
http://img175.imageshack.us/img175/screenshot2hy7.jpg/1/w1340.png (http://g.imageshack.us/img175/screenshot2hy7.jpg/1/)

carl
01-07-2009, 04:53 PM
After reading this post http://www.webdeveloper.com/forum/showthread.php?p=965843#post965843 it seems like the simoncaley.com-site itself is legit, because no popup opens when you enter the name directly, but clicking on googles link opens the popup.
Perhaps it's something within googles search results. Strange.

Diceman
01-07-2009, 05:00 PM
i believe this is commonly known as the "facebook" virus as it was going through facebook via comment pages and such but has spread to various parts of the net. i doubt anyone is specifically targeting HEM users, just that the virus is so wide spread at this point that lots of sites are infecting internet users.