Вот такую хрень выдает, в банере по всей видимости зашит редайрект.
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
7/29/2013 11:47:24 AM,High,An intrusion attempt by 50.21.189.169 was blocked.,Blocked,No Action Required,Web Attack : Malvertisement Website Redirect,No Action Required,No Action Required,"50.21.189.169, 80","emirat.us/openx/www/delivery/ajs.php?zoneid=41&source=_blank&target=_blank&withtext=1&cb=94276469319&charset=windows-1251&loc=http://chatru.com/uae/","ALEX (192.168.*.*, 57475)",50.21.189.169,"TCP, www-http"
Network traffic from emirat.us/openx/www/delivery/ajs.php?zoneid=41&source=_blank&target=_blank&withtext=1&cb=94276469319&charset=windows-1251&loc=http://chatru.com/uae/ matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE. To stop being notified for this type of traffic, in the Actions panel, click Stop Notifying Me.