Scareware sites being sent through email!

setup_security_defender_622.exe Chrome Scareware site on a Linux system!

Don’t try this home!

If you are not careful you could easily get infected with spyware, or worms. I on the other hand know how to fix the problem if it happens or how to prevent it in the first place. I was using a live Kubuntu CD to do my test with the link that was given to me, so I didn’t have to worry to much about infections.  The URL which was given to me was “[Website]/wp-content/plugins/(random letters and numbers)“.   You could easily tell that it was just spam because there was no subject or anything else but a link in the email.   I did this a number a times and I got some very interesting websites:

  • http://scan27.delfasd.co.in (scareware site, See picture above)
  • http://wikimedicinepatients.eu (Canadian Pharmacy) [WHOIS]
  • http://systemtestnow.com  (Scareware site I think) [WHOIS]
  • http://scan7.oggnot.co.in
  • http://update17.oggnot.co.in

Never Run an unexpected Program!

I knew this was scareware site because it automatically sent me a file “setup_security_defender_622.exe“.   I decided to check it out even more so I submitted to Jotti and you can see what they said by clicking the filename.   I also submitted it to the Virustotal to see what it said and I wasn’t surprised but again, you should never run programs that your not expecting.    This is a really old scareware tactic that is still being used today and your self be taken advantage of.

Antivirus is KEY!

To prevent viruses, if your on a computer you really should consider buying an Antivirus.  There is even Antivurs for Macintosh machines, and Linux if your interested.   I don’t know if you really need a Linux antivirus but I guess it wouldn’t hurt to have it.   I think they are far behind Mac/Windows Antivurus programs but yet they are getting better.   You never really know what is needed in the future but you should be ready when it comes.

Which Antivirus Software do you use?

I am quite curious as to which you use when it comes to having an antivirus software.   By all means leave a comment and tell me which one you use or if you found another website that you have found, and I’ll investigate it and tell others about it.

Paul Sylvester

Enhanced by Zemanta

List of Fake Antivirus Sites for Aug 5, 2009

Internet Antivirus Pro

Today has been really busy for the malware authors out there and I intend to update you on all the sites that are what I call scareware sites.

[intlink id=”4217″ type=”post”]Internet Antivirus Pro Scareware[/intlink] sites: [ad]

  • alectr.info
  • cality.info
  • diffus.info
  • dictor.info
  • upwize.info

[intlink id=”4403″ type=”post”]Personal Antivirus — Download SUPERAntiSpyware[/intlink] (Database Version 4047 or later):

  • bestscanantispywarev3.com
  • best-virus-scanner6.com
  • clean-all-spyware07.com

[intlink id=”1837″ type=”post”]Antivirus System Pro Scareware Sites[/intlink]:

(SuperAntiSpyware removes it with Database Version 4053 or later)

  • osawarepro.com

[intlink id=”3977″ type=”post”]Rogue Antivirus scareware sites[/intlink]:

  • antivirus-xp.awardspace.us
  • vrenutredo.com
  • hustlerscanner.com (fake Scanner Page)
  • go-scansystem.com
  • ultrapc-scan.com (Fake Scanner page)
  • scanonline-protect.net
  • checkvirus-zone.net
  • scantoolsite.com
  • scan-secure.net

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

Malware Defender 2009 — How to Remove it

malware_defender2009

[ad]If your noticed a new program on your system called MALWAREDEF.EXE, the filename is usually associated with Malware Defender 2009  sites. The interesting fact is that most of the time this is installed silently and should be removed Immediately. The program might of been installed by other adware or trojans on your system. The Good news SUPERAntiSpyware can block and remove MALWAREDEF.EXE and thousands of other harmful applications. So if you have this fakeware or I call it scareware, maybe it is time to Buy SuperAntiSpyware Professional which comes with Realtime Blocking of threats! Prrevent potentially harmful software (spyware, adware, worms, dialers, hijackers, keyloggers) from installing or re-installing.

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

List of malware sites for Sept 4, 2009

Antivirussystempro

[intlink id=”4403″ type=”post”]Personal Antivirus — Download SUPERAntiSpyware[/intlink] (Database Version 4047):[ad]

  • hqvirusscanner8.com
  • hqvirusscanner5.com
  • antivirus-online-scan8.com
  • thebestviruscheck.com

[intlink id=”4217″ type=”post”]Internet Antivirus Pro Scareware[/intlink] Sites:

  • bedash.info
  • scourg.info
  • best-scanpc.com

[intlink id=”3977″ type=”post”]Rogue Antivirus scareware sites[/intlink]:

  • go-scanandprotect.com
  • go-scanandsearch.com
  • securityscantoolworld.com
  • myvirusscanner.net
  • scan-secure.com
  • ikyigy.cn
  • ikyadeh.cn
  • ikoiwe.cn
  • ikorate.cn
  • ihagoin.cn
  • ijobuaw.cn
  • uloumir.cn
  • bideqta.cn

<p style=”text-align: center;”></p>
[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

List of Fake Antivirus Sites for Sept 3, 2009

personalantivirus3

Looks like they have been at it again here is the list for Thursday:

[intlink id=”4403″ type=”post”]Personal Antivirus — Download SUPERAntiSpyware[/intlink] (Database Version 4047):

  • worldbestonlinescanner.com
  • worldbestonlinescanner2.com
  • best-antivirus3.com
  • worldbestonlinescan9.com
  • worldbestonlinescanner2.com
  • antivirusonlinescan6.com
  • hqvirusscanner.com

[intlink id=”3977″ type=”post”]Rogue Antivirus scareware sites[/intlink]: [ad]

  • securitytoolworld.com
  • searchpcguard.net
  • scansystem-online.net
  • search-protect.net
  • myprotected-zone.net
  • system-guard.com
  • antivirusfilter-zone.com
  • scan-virus.net

[intlink id=”4217″ type=”post”]Internet Antivirus Pro Scareware[/intlink]:

  • droope.info
  • faites.info
  • tented.info
  • sallut.info
  • onclew.info
  • numben.info

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]