Microsoft Download Center Phished??

Alright... so today, I had a user that needed the Powerpoint 2007 viewer. I googled it, got a little click-happy, and followed the first link that appeared.

Thinking I was at MS, I clicked the download button. While I was waiting, I took a look at the URL, and noticed it was on the thesource.ofallevil.com domain!

WTF?!?!?

So, I stopped it of course, and found the download at Microsoft.

So I guess the download center has been phished?!?!? Can anyone confirm? Here's some screenshots:

http://img174.imageshack.us/img174/4278/phishja7.gif

http://img174.imageshack.us/img174/9490/thesourcexs4.gif

Remarkably similar. Someone with a vendetta against MS??

 

Just checked it and it's #3 in Google for me. I'm tempted to try the download, nah I'll give Chas a break.LOL

 

I'll download it.

 

I did too, and it actually came from download.microsoft.com, so maybe I'm just being p'noid.

D/L'd the file, updated the AV, and scanned it, and there was nothing found soo....

 

Yep got curious, it's been around since Mar. 2006 from what I can find.

http://toolbar.netcraft.com/site_report?url=http://thesource.ofallevil.com not sure what this means, has MS bought the domain, but not all links lead to them?

One page for thesource.of all evil. you get msg below, won't post link - not safe for some of us, this is as far as I went, don't want to visit Malware and explain how I can't follow directions.

There is a problem with this website's security certificate.

The security certificate presented by this website was issued for a different website's address.
Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended).
More information

If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting.
When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com.
If you choose to ignore this error and continue, do not enter private information into the website.
For more information, see "Certificate Errors" in Internet Explorer Help.