Fake AV site

[Mofaya]

Code: [Select]

hxxp://www2.smartcyksentinel.findhere.org/f5vhe0u0?848a=XKCc0uiq1dzkxuSR6M7SsZuhmJxepKHFsKCH09bF66jGuMGa1eGinWhrXtDmqtjoq4nb1Nei0NOys56Sqaet07Dc2uzo1OyR1sirwrWUztx1bG%2BPpZ2aoKaWq5mll5Tn3c%2FZ4atxaYfq1sWvrJipkefZ2rGan5ehbGVqlaeelJjo1racppWmpaKglqRtWpzQ4M7K4LHa8OKmk%2BLj2Zvc0aCjpMXY34%2FY3dHd09jX06LY4MySo5aa2dSq09jax%2BSR5crUsdHi2dxdZ3mGpbOGpLrW8NTnyNah4NfT0KerZtPokpO43dHs0OXZk6av19PQnaxm0dvdhQ%3D%3D
I bumped into this while visiting

Code: [Select]

hxxp://theseoblogger.com/seo-blogs/wordpress/wordpress-seo-tutorial-permalink-structure/It appears the site is infected and redirect visitors to the fake anti-virus site hosted on ip

Code: [Select]

212.117.175.176
Here is a Jotti Virus can report of the file that the fake AV will try to install on your pc
http://virusscan.jotti.org/en/scanresult/30067b9cd73fa06ceecbcbd1ea919f94ca75ef91/91cc134b29f6dc7c629bc94feb1b2a3b24e22c95