I am writing this as a warning to other users, particularly people who often use lyrics websites to read the lyrics of their favourite songs.

This morning I wanted to find out the lyrics of the song Tipsy by J-Kwon. So I typed tipsy lyrics into Google, and visited the page at the top of the results list (which was h**p://www.lyricsdomain.com/10/jkwon/tipsy.html) When I got there, an ActiveX dialog popped up asking to install some software. I clicked No, but it kept going round in an infinite loop, so eventually I pressed Yes and tried to quickly shut down my browser. I blocked all communications to the internet.

But it was already too late - when I scanned my computer with AdAware, it found several pieces of spyware, including BlazeFind malware, Bargain Buddy, and WindUpdates (name obviously designed to confuse with the legitimate WindowsUpdates).

This time, it's not just Internet Explorer users who are affected - it affected me on Firefox. One of the spyware folders actually contained a ReadMe file, which said that it is served by a company called Windupdates.com. It said that people were given a choice to install the spyware, but I think users are almost forced to install it, unless they press Ctrl Alt Delete to shut down their browser as soon as the popup appears. That kind of thing really irritates me - people are forced to install, otherwise they can't use the site.

So I suggest everyone blocks the sites lyricsdomain.com and windupdates.com. Hopefully they will get the message, although it's worrying that it was the first result on Google. Luckily there are still many other clean lyrics sites around.

this is a very sad coincidence. I usually go to azlyrics.com to get my lyrics. They have ads and maybe 2 popups every now and then but no nasty junk like spyware or adware.

EDIT: if you want more protection while you're on the internet, i suggest you take a visit to the BISS Forums and read about two very special programs they have named Protowall and The Blocklist Manager

Added to k-lite next HOSTS file

Next time when you're stuck in a 'do you want to install and run...' loop, fire up the task manager and kill your browser from there.

And of course don't use IE.

I'm yet to find a VALID reason why using IE = Malware

HKM: If we learned anything from last blaster worm you would know not to allow activex keep it on prompt so you always knows and have opt to allow and deny what you don't need. By the way people actully make money of this BS every time someone installs it they get paid. Trust me know

Google does not go off relevance but most hits and who has payed them the most. They do not screen sites for malware at all and, in fact, they track your every move within any google network page, passing it on to advertisers.

I don't use google for these and quite a few other security reasons....