I copied this post by Rob in the support thread. I wanted to give the heads up in this board also as most people reading this board may be concerned. thanks.
We at RFF are just warning you about this site. If you decide to check out this site, then you are doing so at your own risk, and the staff at RFF takes NO responsibility for your actions or any damage incurred to you or your computer!
Code embedded in a site likely to be surfed by fans of the 'Survivor' TV show takes advantage of known software flaws
A Web site likely to attract fans of the CBS-owned television series Survivor could contain a nasty surprise for its visitors.
The site, owned by a party that has licensed the word "survivor" in a top-level US domain -- not linked to the television network -- today contained a smorgasbord of malicious code embedded in HTML scripts.
A concerned Web user alerted ZDNet Australia about the site after noticing that content on the site had triggered his antivirus software.
Users who visit the site without adequate antivirus protection on their PCs are at risk of being infected by three Trojans coded into scripts maliciously embedded in its content: VBS/Psyme, Debeski and Java Script/IE.startgen.d.
The Trojans take advantage of known exploits in Microsoft ActiveX, Internet Explorer and Java virtual machine.
While antivirus vendors only rank the script Trojans as moderate or low risks, they may be designed to prompt a computer accessing the site to automatically download a secondary payload from another location on the Internet.
At this stage antivirus vendors that ZDNet Australia has approached have not revealed what the payload is, but miscreants have recently contrived similar forms of attack into maliciously designed HTML emails MessageLabs detected this month.