Author Topic: 195.88.190.54  (Read 10312 times)

0 Members and 1 Guest are viewing this topic.

February 26, 2010, 09:53:48 pm
Read 10312 times

eoin.miller

  • Sr. Member

  • Offline
  • ****

  • 179
Found that 195.88.190.54 hosts several fakeav domains for check-in purposes:

av-protect.com
av-command.com
avgroupwebsite.com

Infected clients will perform POST's to /loads2.php and /check.

March 01, 2010, 04:59:01 pm
Reply #1

eoin.miller

  • Sr. Member

  • Offline
  • ****

  • 179
Also:

av-crew.net