Archive for April, 2008

Yet another LocusSoftware connection with ipsCA

Here is yet another example of LocusSoftware foisting their bogus products upon the public with the help of “ipsCA” … If you click the “Try free” button … my AV (NOD32 v3) jumps up with the following: (and kills the connection) However I am still able via Microsoft Fiddler to capture the traffic connections, including […]

Another bogus Windows Media Player prompt

Landing on the following site the visitor is prompted with a bogus Media Player prompt … The image is designed to look like a real Windows Media Player … and as you can see IE7 blocked the automatic download of the file … then you see the fake prompt “You need to download new version […]

MVPS HOSTS File Update April-22-2008

The MVPS HOSTS file was recently updated [April-22-2008]http://www.mvps.org/winhelp2002/hosts.htm Download: hosts.zip (154 kb)http://www.mvps.org/winhelp2002/hosts.zip How To: Download and Extract the HOSTS filehttp://www.mvps.org/winhelp2002/hosts2.htm HOSTS File – Frequently Asked Questionshttp://www.mvps.org/winhelp2002/hostsfaq.htm Note: the “text” version makes a great resource for determining possible culprits … (668 kb)http://www.mvps.org/winhelp2002/hosts.txt Sign up for HOSTS file update noticeshttp://www.mvps.org/winhelp2002/updates.htm

Another Rogue Antispyware product from the Pandora Software group

Following up on a article from our friends at BleepingComputer “How to remove Malware Bell” we find: “Malware Bell is a rogue anti-spyware from the same developers as IE Defender and Files Secure. Malware Bell is installed and advertised through the use of Trojans that are installed as Internet Explorer Browser Helper Objects.” These people […]

Another malicious Movie site

Landing on the following site … the typical layout of clickable images is displayed with the following message “Video is protected by unique technology PriveContent” … well that’s something new …  Image edited for display purposes If you click the “Enable video now” you are redirected to a download that is detected as “Trojan.Fake.GoogleBar“or directly […]

Another Rogue product from LocusSoftware

Following up on a post from Sandi who is reporting yet another malicious advertisement (.swf) that redirects several times until you land on one of many rogue Antispyware products from LocusSoftware … When you click the Download button you are routed to a “secure” page where you are prompted to purchase their (bogus) product … […]

Is PCSecurityShield still a Rogue Antispyware company?

Donna’s SecurityFlash pointed out that there is quite a storm over the discovery that Comodo has licensed their firewall engine to PCSecurityShield … once considered promoting Rogue/Suspect Antispyware products … Seems PCSecurityShield has turned around their business model and are now rebranding several Security related products. This excerpt from Download.com (Company Profile) … “PCSecurityShield is a 3 […]

Zango Alleges Kaspersky Is Badware Itself

Well … here we go again … MediaPost is reporting that Zango is again going after Kaspersky. Zango lost round 1 in court and they are not happy with the decision. In their latest filing (link to .pdf here) they state the Court was wrong and that Kaspersky is actually Badware (as defined in StopBadware.org) […]

Vomba Acquires Adware Company WhenU

MediaPost is reporting that Vomba has acquired Whenu … Who is Vomba? they are a division of “Gamma Entertainment” Just so there is no confusion of “who-is-who” … and where they are located:  Vomba Network 3300 Cote-Vertu, Suite 406 Montreal, QC H4R 2B7  WHENU.COM 3300 Cote-Vertu, Suite 406 Montreal, QC H4R 2B7  Surfing accuracy 3300 Cote-Vertu Suite 406 Montreal, Quebec H4R […]

MVPS HOSTS File Update April-01-2008

The MVPS HOSTS file was recently updated [April-01-2008]http://www.mvps.org/winhelp2002/hosts.htm Download: hosts.zip (154 kb)http://www.mvps.org/winhelp2002/hosts.zip How To: Download and Extract the HOSTS filehttp://www.mvps.org/winhelp2002/hosts2.htm HOSTS File – Frequently Asked Questionshttp://www.mvps.org/winhelp2002/hostsfaq.htm Note: the “text” version makes a great resource for determining possible culprits … (670 kb)http://www.mvps.org/winhelp2002/hosts.txt Sign up for HOSTS file update noticeshttp://www.mvps.org/winhelp2002/updates.htm