Author Topic: Fake AV site  (Read 2892 times)

0 Members and 1 Guest are viewing this topic.

June 16, 2011, 03:09:13 am
Read 2892 times

Mofaya

  • Newbie

  • Offline
  • *

  • 8
Code: [Select]
hxxp://www2.smartcyksentinel.findhere.org/f5vhe0u0?848a=XKCc0uiq1dzkxuSR6M7SsZuhmJxepKHFsKCH09bF66jGuMGa1eGinWhrXtDmqtjoq4nb1Nei0NOys56Sqaet07Dc2uzo1OyR1sirwrWUztx1bG%2BPpZ2aoKaWq5mll5Tn3c%2FZ4atxaYfq1sWvrJipkefZ2rGan5ehbGVqlaeelJjo1racppWmpaKglqRtWpzQ4M7K4LHa8OKmk%2BLj2Zvc0aCjpMXY34%2FY3dHd09jX06LY4MySo5aa2dSq09jax%2BSR5crUsdHi2dxdZ3mGpbOGpLrW8NTnyNah4NfT0KerZtPokpO43dHs0OXZk6av19PQnaxm0dvdhQ%3D%3D
I bumped into this while visiting
Code: [Select]
hxxp://theseoblogger.com/seo-blogs/wordpress/wordpress-seo-tutorial-permalink-structure/It appears the site is infected and redirect visitors to the fake anti-virus site hosted on ip
Code: [Select]
212.117.175.176
Here is a Jotti Virus can report of the file that the fake AV will try to install on your pc
http://virusscan.jotti.org/en/scanresult/30067b9cd73fa06ceecbcbd1ea919f94ca75ef91/91cc134b29f6dc7c629bc94feb1b2a3b24e22c95