(The quickest way to register)

Forum

  1. User picture
    • wotwot on Mon 21 Sep 2009
    • 12:52:54 PM UTC

    Website peddling fakeAV

    Hi guys.

    This site hasn't got enough ratings yet- please can we make it turn red so that WOT users are protected!

    http://www.mywot.com/en/scorecard/my-newprotection... -This site is using scare tactics and fake "scans" to push "Windows PC Defender"- a fake antivirus that hijacks computers and demands payment to remove non-existent infections.

    For WOT experts: The fake scan page is located at /?p=WKmimHVlaW6HjsbIo22EhHV8ipnVbWiMnNah2qduWJjOxaCbkXp%2FWqyopHaYXpSaYWWTZJdvmlPVpJHaotahlFerpXOWk5hsZmlsbGxoXpzEag%3D%3D

    (just add the website URL before this string).....

Comments:

  2. User picture
    • g7w on Mon 28 Sep 2009
    • 02:08:05 AM UTC

    TrojanDownloader:Win32/FakeVimes

    Experiment in a Sandbox with a current AV for this one, only 5/41 per VirusTotal

    Submitted to Avira
    File ID 25456236
    Filename setup_build8_115.exe
    Size (Byte) 209.5 KB
    Result UNDER ANALYSIS

    It should make it in the next update or two, heh.

    Here are the rest of the mirror sites residing on the same IP:

    64.86.16.118
    my-newprotection.net
    fastscan-secure.net
    my-protectionzone.com
    new-systemguard.com
    windows-systemguard.com

    Malicious content

    Thanks for the find wotwot
    -------
    Against Intuition - gives us safety through Web of Trust.
    WOT Community - gives us security through unity.
    Thank you all
    - G7W
  3. User picture
    • Xp54321 on Sun 27 Sep 2009
    • 03:52:31 PM UTC

    Done

    Rated and commented.

    Thanks.

    :-)

    —Xp54321
  4. User picture
    • tinfoil on Sun 27 Sep 2009
    • 04:00:45 PM UTC

    Thank you; currently rating.

    Thank you; currently rating.