It seems that the idea of poisoning websites with Java scripts has taken a slightly new twist.

Attackers have taken advantage of JavaScript before, but usually on individual sites. The search engine trick — which has been focused on Google, though it could work on Yahoo and MSN search engines — is new, Danchev says.
Apparently it works like this:

The vulnerability occurs when someone does a Google search, then clicks on a result that has been secretly tainted by hackers. They will usually be taken to the Web page they expect. But at the same time, they are invisibly redirected to a computer server that installs a hidden program.
Article is here:

http://www.usatoday.com/tech/news/co...s_N.htm?csp=34

The worry here is that the targets seem to be large and reputable sites, that more security aware people would be tempted to allow in FireFox's "NoScipt" plugin, or put in the trusted zone of IE?

Still want to turn off UAC.....................assuming that would warn you?????