Archive for December 25, 2007

Another fake free Movie site

Hopefully regular readers of this blog do not fall for these offers of “it is absolutely free” … Accessing the above site you see the typical “ActiveX Object Error” bogus prompt … Clicking any of the above button results in (codecmeg4049.exe) Trojan.Win32.DNSChanger.akt (VirusTotal results)Both sites involved are hosted (where else) Cernel which is typically home to the […]

Another malicious fake scanner site

Following up on an email tip from Adrienne … what’s interesting while the fake scan is running the site tries to download/install “Install2486.cab” … however my AV kills the download …  Clicking on any of the links on the page results in the site downloading “Install2486.exe” … This site is hosted at Hostfresh via ESTDOMAINS/PrivacyProtect which […]