FYI…

- http://sunbeltblog.blogspot.com/2008/03/se…ends-to-be.html
March 21, 2008 - "No news in having another trojan doing typical host redirects, but in this case, we found the use of Google’s name to be mildly interesting: A new variant of Trojan.Delf from the -Loadscc- gang changes your host file to redirect to a fake Google page. The fake Google page pushes a SpywareIsolator, a rogue antispyware program.
O1 - Hosts: 124(dot)217(dot)251(dot)147 google .dk
O1 - Hosts: 124(dot)217(dot)251(dot)147 google .se
O1 - Hosts: 124(dot)217(dot)251(dot)147 google .co.nz
and so on…"

(Screenshot available at the URL above.)

:ph34r: