webeasysearch hijacking

http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

GET /search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Date: Mon, 05 Apr 2010 16:33:26 GMT
Expires: -1
Content-Type: text/html; charset=UTF-8
Set-Cookie: SS=Q0=RGlhbmEgTGFyc2Vu; path=/search
Set-Cookie: PREF=ID=fd913e79c881ae9c:TM=1270485206:LM=1270485206:S=sLPW6VHgtb5p3dBb; expires=Wed, 04-Apr-2012 16:33:26 GMT; path=/; domain=.google.com
Set-Cookie: NID=33=hW_GnFEh-V6T_HecBqN6kb2UTPeS-wFm0eevporxMG314QaczArxqy8ZMjUjtrvPAN6MZm_Qyk3OjtXuZM3xDOUrVBHsWoPdKPZ1usw2UqxzkL8Fm03nkTYbzO_00pm8; expires=Tue, 05-Oct-2010 16:33:26 GMT; path=/; domain=.google.com; HttpOnly
Server: gws
Transfer-Encoding: chunked
Content-Encoding: gzip
----------------------------------------------------------
http://clients1.google.com/generate_204

GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
Cookie: PREF=ID=fd913e79c881ae9c:TM=1270485206:LM=1270485206:S=sLPW6VHgtb5p3dBb; NID=33=hW_GnFEh-V6T_HecBqN6kb2UTPeS-wFm0eevporxMG314QaczArxqy8ZMjUjtrvPAN6MZm_Qyk3OjtXuZM3xDOUrVBHsWoPdKPZ1usw2UqxzkL8Fm03nkTYbzO_00pm8

HTTP/1.1 204 No Content
Content-Length: 0
Content-Type: text/html
Date: Mon, 05 Apr 2010 16:33:27 GMT
Server: GFE/2.0
X-XSS-Protection: 0
----------------------------------------------------------
http://www.google.com/csi?v=3&s=web&action=&e=24249,24252&ei=1hC6S83HCYKC8gb9wOHhBw&expi=24249,24252&imc=6&imn=6&imp=0&rt=xjsls.1100,xjses.1134,xjsee.1222,prt.1384,xjs.1386,ol.1675,iml.1384

GET /csi?v=3&s=web&action=&e=24249,24252&ei=1hC6S83HCYKC8gb9wOHhBw&expi=24249,24252&imc=6&imn=6&imp=0&rt=xjsls.1100,xjses.1134,xjsee.1222,prt.1384,xjs.1386,ol.1675,iml.1384 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
Cookie: PREF=ID=fd913e79c881ae9c:TM=1270485206:LM=1270485206:S=sLPW6VHgtb5p3dBb; NID=33=hW_GnFEh-V6T_HecBqN6kb2UTPeS-wFm0eevporxMG314QaczArxqy8ZMjUjtrvPAN6MZm_Qyk3OjtXuZM3xDOUrVBHsWoPdKPZ1usw2UqxzkL8Fm03nkTYbzO_00pm8

HTTP/1.1 204 No Content
Content-Length: 0
Date: Wed, 21 Jan 2004 19:51:30 GMT
Pragma: no-cache
Cache-Control: private, no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Content-Type: text/html
Server: Golfe
----------------------------------------------------------
http://www.google.com/gen_204?atyp=i&ct=backbutton&ei=1hC6S83HCYKC8gb9wOHhBw

GET /gen_204?atyp=i&ct=backbutton&ei=1hC6S83HCYKC8gb9wOHhBw HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
Cookie: PREF=ID=fd913e79c881ae9c:TM=1270485206:LM=1270485206:S=sLPW6VHgtb5p3dBb; NID=33=hW_GnFEh-V6T_HecBqN6kb2UTPeS-wFm0eevporxMG314QaczArxqy8ZMjUjtrvPAN6MZm_Qyk3OjtXuZM3xDOUrVBHsWoPdKPZ1usw2UqxzkL8Fm03nkTYbzO_00pm8

HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
Set-Cookie: PREF=ID=fd913e79c881ae9c:U=8e6ea5c39d57737d:TM=1270485206:LM=1270485208:S=dxsOKRc95KMq5Wx4; expires=Wed, 04-Apr-2012 16:33:28 GMT; path=/; domain=.google.com
Date: Mon, 05 Apr 2010 16:33:28 GMT
Server: gws
Content-Length: 0
----------------------------------------------------------
http://www.futureworksconsulting.com/

GET / HTTP/1.1
Host: www.futureworksconsulting.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
X-Moz: prefetch

HTTP/1.1 302 Moved Temporarily
Date: Mon, 05 Apr 2010 16:33:28 GMT
Server: Apache/2.2.8 (Unix) FrontPage/5.0.2.2635
X-Powered-By: PHP/5.2.6
X-Pingback: http://futureworksconsulting.com/2008site/xmlrpc.php
Location: http://futureworksconsulting.com/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
----------------------------------------------------------
http://futureworksconsulting.com/

GET / HTTP/1.1
Host: futureworksconsulting.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
X-Moz: prefetch

HTTP/1.1 302 Found
Date: Mon, 05 Apr 2010 16:33:32 GMT
Server: Apache/2.2.8 (Unix) FrontPage/5.0.2.2635
Location: http://webeasysearch.com/?q=UR1yZ0xIQk1lUnRnZllDEnZVBlNBSUQdQk5tWQZQUkVRf1VSTB1sVx0dBlBSRVF%2FSVAdb3R5VW1KcRBsSmlZbWMUWG1KcR0GUFJFUX9USU1FHW10aRNtZHEUbnRpWG1HHR0GUFJFUX9SRUZFUkVSHUFochBDZE9WbBNEE0RZFU5CEhlOQmd1VXkSGVRsE25MeXhqSkFkGVhwdXJQeXcVSGsQWEhDTm5MQkl6UHp0ERFEZ3lUb2N6Vnp0ERFEZ3lUb2N6SEN0ERBqTmpTQ1oRVkNNQ1VCdxkWQXdYU3l0UExCSRF2dVpQVnpNelB5EkxIQmN6SkJnTExCTnEZek1MWXp3elZFYxFI&c=%20
Content-Length: 576
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
----------------------------------------------------------
http://webeasysearch.com/?q=UR1yZ0xIQk1lUnRnZllDEnZVBlNBSUQdQk5tWQZQUkVRf1VSTB1sVx0dBlBSRVF%2FSVAdb3R5VW1KcRBsSmlZbWMUWG1KcR0GUFJFUX9USU1FHW10aRNtZHEUbnRpWG1HHR0GUFJFUX9SRUZFUkVSHUFochBDZE9WbBNEE0RZFU5CEhlOQmd1VXkSGVRsE25MeXhqSkFkGVhwdXJQeXcVSGsQWEhDTm5MQkl6UHp0ERFEZ3lUb2N6Vnp0ERFEZ3lUb2N6SEN0ERBqTmpTQ1oRVkNNQ1VCdxkWQXdYU3l0UExCSRF2dVpQVnpNelB5EkxIQmN6SkJnTExCTnEZek1MWXp3elZFYxFI&c=%20

GET /?q=UR1yZ0xIQk1lUnRnZllDEnZVBlNBSUQdQk5tWQZQUkVRf1VSTB1sVx0dBlBSRVF%2FSVAdb3R5VW1KcRBsSmlZbWMUWG1KcR0GUFJFUX9USU1FHW10aRNtZHEUbnRpWG1HHR0GUFJFUX9SRUZFUkVSHUFochBDZE9WbBNEE0RZFU5CEhlOQmd1VXkSGVRsE25MeXhqSkFkGVhwdXJQeXcVSGsQWEhDTm5MQkl6UHp0ERFEZ3lUb2N6Vnp0ERFEZ3lUb2N6SEN0ERBqTmpTQ1oRVkNNQ1VCdxkWQXdYU3l0UExCSRF2dVpQVnpNelB5EkxIQmN6SkJnTExCTnEZek1MWXp3elZFYxFI&c=%20 HTTP/1.1
Host: webeasysearch.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
X-Moz: prefetch

HTTP/1.1 302 Moved Temporarily
Date: Mon, 05 Apr 2010 17:07:12 GMT
Server: Apache/2.2.12 (Ubuntu)
X-Powered-By: PHP/5.2.10-2ubuntu6.3
Location: http://webeasysearch.com/search/search.php?q=Diana+Larsen
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html
----------------------------------------------------------
http://webeasysearch.com/search/search.php?q=Diana+Larsen

GET /search/search.php?q=Diana+Larsen HTTP/1.1
Host: webeasysearch.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.google.com/search?q=Diana+Larsen&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a
X-Moz: prefetch

HTTP/1.1 200 OK
Date: Mon, 05 Apr 2010 17:07:12 GMT
Server: Apache/2.2.12 (Ubuntu)
X-Powered-By: PHP/5.2.10-2ubuntu6.3
Set-Cookie: cook_aff=deleted; expires=Sun, 05-Apr-2009 17:07:11 GMT
Set-Cookie: cook_saff=deleted; expires=Sun, 05-Apr-2009 17:07:11 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17774
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html
----------------------------------------------------------