Archive for August 8th, 2008

ZINAPS Anti-Spyware 2008 another fake Antivirus application

Friday, August 8th, 2008

ZINAPS Anti-Spyware 2008 is another fake Antivirus application.

DO NOT download any software from domain(s) of Power ZINAPS Anti-Spyware 2008!

ZINAPS Anti-Spyware 2008

 

File install.exe received on 08.08.2008 15:09:12 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.8.0 2008.08.08 -
AntiVir 7.8.1.19 2008.08.08 -
Authentium 5.1.0.4 2008.08.07 W32/Heuristic-114!Eldorado
Avast 4.8.1195.0 2008.08.07 -
AVG 8.0.0.156 2008.08.08 WinFixer.AUG
BitDefender 7.2 2008.08.08 -
CAT-QuickHeal 9.50 2008.08.08 FraudTool.Agent.k (Not a Virus)
ClamAV 0.93.1 2008.08.08 -
DrWeb 4.44.0.09170 2008.08.08 -
eSafe 7.0.17.0 2008.08.07 Suspicious File
eTrust-Vet 31.6.6019 2008.08.08 -
Ewido 4.0 2008.08.08 -
F-Prot 4.4.4.56 2008.08.07 W32/Heuristic-114!Eldorado
F-Secure 7.60.13501.0 2008.08.08 -
Fortinet 3.14.0.0 2008.08.08 -
GData 2.0.7306.1023 2008.08.08 -
Ikarus T3.1.1.34.0 2008.08.08 Trojan-PWS.Win32.WebMoner.ar
K7AntiVirus 7.10.408 2008.08.08 -
Kaspersky 7.0.0.125 2008.08.08 -
McAfee 5356 2008.08.07 potentially unwanted program WinFixer
Microsoft 1.3807 2008.08.08 Program:Win32/SpySheriff
NOD32v2 3340 2008.08.08 -
Norman 5.80.02 2008.08.08 -
Panda 9.0.0.4 2008.08.07 -
PCTools 4.4.2.0 2008.08.08 -
Prevx1 V2 2008.08.08 -
Rising 20.56.41.00 2008.08.08 -
Sophos 4.32.0 2008.08.08 Troj/Fakezi-Gen
Sunbelt 3.1.1537.1 2008.08.07 -
Symantec 10 2008.08.08 -
TheHacker 6.2.96.394 2008.08.08 -
TrendMicro 8.700.0.1004 2008.08.08 -
VBA32 3.12.8.3 2008.08.08 -
ViRobot 2008.8.8.1329 2008.08.08 -
VirusBuster 4.5.11.0 2008.08.07 -
Webwasher-Gateway 6.6.2 2008.08.08 -
 
Additional information
File size: 384512 bytes
MD5…: 601580ef7d062692c8f37b570490b963
SHA1..: 1fd4b67d5469764b26bbf7d97517817432a768f8
SHA256: e42f47b1873c06733d1816d8fe2e7bf61666eb6eefbe42e94f37b3b2c971f870
SHA512: f9dbaad4d313ed0f3d82ac82f0e5f6cde1c2bbfe2d2ffcdc77b5f79aeffbf91e
7a07384094621f6a7e2d8f705b2155a0110c0b3d850dc4583b165f3b8eedae29
PEiD..: -
PEInfo: PE Structure information( base data )
entrypointaddress.: 0×5c2560
timedatestamp…..: 0×487cd1b7 (Tue Jul 15 16:35:03 2008)
machinetype…….: 0×14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0×1000 0×167000 0×0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0×168000 0×5b000 0×5a800 7.91 30337e4dc6b8f887d1188ae9ffbd5f54
.rsrc 0×1c3000 0×4000 0×3200 5.09 e0ed549f0e47eccf924d2413b7441273

( 8 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> COMCTL32.dll: ImageList_Create
> GDI32.dll: SaveDC
> ole32.dll: CoInitialize
> SHELL32.dll: SHChangeNotify
> USER32.dll: PtInRect
> WININET.dll: InternetOpenA
> WINMM.dll: PlaySoundA

( 0 exports )
packers (Authentium): UPX
packers (Kaspersky): PE_Patch.UPX, UPX, PE_Patch.UPX, UPX
packers (F-Prot): UPX

ZINAPS Anti-Spyware 2008

Host: zinaps.com
IP: 216.150.79.75

Whois of IP 216.150.79.75 hosting of ZINAPS Anti-Spyware 2008:

OrgName:    Essential Services
OrgID:      ESSS
Address:    AccessIT - Hosting Services
Address:    75 Broad Street, Suite 1902
City:       New York
StateProv:  NY
PostalCode: 10004
Country:    US
RAbuseHandle: EAA12-ARIN
RAbuseName:   Ezzi Abuse Account
RAbusePhone:  +1-866-438-3994
RAbuseEmail:   abuse@ezzi.net

 

ZINAPS Anti-Spyware 2008

ZINAPS Anti-Spyware 2008
Host: secure.zinaps.com
IP: 216.150.79.75

Whois of IP 216.150.79.75 selling ZINAPS Anti-Spyware 2008:

OrgName:    Essential Services
OrgID:      ESSS
Address:    AccessIT - Hosting Services
Address:    75 Broad Street, Suite 1902
City:       New York
StateProv:  NY
PostalCode: 10004
Country:    US
RAbuseHandle: EAA12-ARIN
RAbuseName:   Ezzi Abuse Account
RAbusePhone:  +1-866-438-3994
RAbuseEmail:   abuse@ezzi.net

Tags: , ,
Posted in Malware, Rogues | No Comments »

Error Doctor 2008 fake antispyware solution

Friday, August 8th, 2008

Error Doctor 2008 is a fake antispyware solution.

Here are some fake scanning pages of Error Doctor 2008 .

DO NOT download any software from domain(s) of Error Doctor 2008 .

Error Doctor 2008

 

File ErrorDoctorSetup.exe received on 08.08.2008 13:26:47 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.8.0 2008.08.08 -
AntiVir 7.8.1.19 2008.08.08 SPR/FakeScanner.AntiSpyware.RC
Authentium 5.1.0.4 2008.08.07 -
Avast 4.8.1195.0 2008.08.07 Win32:Trojan-gen {Other}
AVG 8.0.0.156 2008.08.08 Fake_AntiSpyware.RC
BitDefender 7.2 2008.08.08 -
CAT-QuickHeal 9.50 2008.08.08 -
ClamAV 0.93.1 2008.08.08 -
DrWeb 4.44.0.09170 2008.08.08 -
eSafe 7.0.17.0 2008.08.07 FraudTool.Win32.Erro
eTrust-Vet 31.6.6019 2008.08.08 -
Ewido 4.0 2008.08.08 -
F-Prot 4.4.4.56 2008.08.07 -
F-Secure 7.60.13501.0 2008.08.08 -
Fortinet 3.14.0.0 2008.08.08 -
GData 2.0.7306.1023 2008.08.08 Win32:Trojan-gen
Ikarus T3.1.1.34.0 2008.08.08 Win32.SuspectCrc
K7AntiVirus 7.10.407 2008.08.07 -
Kaspersky 7.0.0.125 2008.08.08 -
McAfee 5356 2008.08.07 -
Microsoft 1.3807 2008.08.08 -
NOD32v2 3340 2008.08.08 -
Norman 5.80.02 2008.08.06 -
Panda 9.0.0.4 2008.08.07 Generic Malware
PCTools 4.4.2.0 2008.08.07 -
Prevx1 V2 2008.08.08 Malicious Software
Rising 20.56.41.00 2008.08.08 -
Sophos 4.32.0 2008.08.08 -
Sunbelt 3.1.1537.1 2008.08.07 -
Symantec 10 2008.08.08 ErrorDoctor
TheHacker 6.2.96.394 2008.08.08 -
TrendMicro 8.700.0.1004 2008.08.08 TROJ_Generic.A
VBA32 3.12.8.3 2008.08.07 -
ViRobot 2008.8.8.1329 2008.08.08 Adware.EDoctor.R.2699735
VirusBuster 4.5.11.0 2008.08.07 -
Webwasher-Gateway 6.6.2 2008.08.08 Riskware.FakeScanner.AntiSpyware.RC
 
Additional information
File size: 2699735 bytes
MD5…: f0e914046a414ac6e005ee5739e0c2ce
SHA1..: 6d7f3f1c70541b21fff24c704f7e9eb166bae7af
SHA256: e1578dc31a913336607b9683bcf7432d2e487c3fab8e006a506478b2e59f38f0
SHA512: c7e69c261dec0c8658dc651e0c82d6389883911a6a21158fad90f3ae3fca1f6e
721a750d6de101518b2faeca1a36f69758a907616d48f8bd09ef6b6f3afaa3ef
PEiD..: InstallShield Custom
 
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=08E3BCC2D7AF21C531C3290DBF23FE009871C803
ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=f0e914046a414ac6e005ee5739e0c2ce

 

Error Doctor 2008

Host: errordoctor.com
IP: 216.138.208.129
Whois of IP 216.138.208.129  hosting of Error Doctor 2008:

OrgName:    Magma Communications Ltd.
OrgID:      MAGM
Address:    31 Auriga Drive
City:       Ottawa
StateProv:  ON
PostalCode: K2E-1C4
Country:    CA
OrgTechHandle: REG5-ORG-ARIN
OrgTechName:   Registrar
OrgTechPhone:  +1-613-228-3565
OrgTechEmail:  registar@magma.ca

Other sites on IP 216.138.208.129 of fake antivirus Error Doctor 2008

1.  Affiliateprograms.net 
2.  Allreverserecords.com 
3.  Anonymous-ip.com 
4.  Bugdocpro.com 
5.  Detectivemembersarea.com 
6.  Errordoctor.com 
7.  Errorremover.com 
8.  Gov-records.com 
9.  Gov-resources.com 
10.  Irs-auctions.com 
11.  Myreverserecords.com 
12.  Public-archives.com 
13.  Public-files.com 
14.  Recordsarea.com 
15.  Repairregistry.com 
16.  Softwaredoctor.com 
17.  Spyremover.com 

Host: ssl.clickbank.net
IP: 209.81.12.134

Whois of IP 209.81.12.134 of domain ssl.clickbank.netselling fake antivirus Error Doctor 2008 :

OrgName:    ViaNet Communications
OrgID:      VIA
Address:    1235 Pear Ave, Suite 107
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US
RTechHandle: JM7712-ARIN
RTechName:   Mcguckin, Joseph
RTechPhone:  +1-415-969-2203
RTechEmail:   joe@via.net

Error Doctor 2008

Error Doctor 2008

Tags: , , ,
Posted in Malware, Rogues | No Comments »

Antivirus Protection fake Antivirus application

Friday, August 8th, 2008

Antivirus Protection is a fake Antivirus application.

DO NOT download any software from domain(s) of Antivirus Protection.

Antivirus Protection

File AntivirusProtection.exe received on 08.08.2008 12:41:36 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.8.0 2008.08.08 -
AntiVir 7.8.1.19 2008.08.08 SPR/FakeAV.B
Authentium 5.1.0.4 2008.08.07 -
Avast 4.8.1195.0 2008.08.07 Win32:Adpatrol
AVG 8.0.0.156 2008.08.08 Generic9.AIBB
BitDefender 7.2 2008.08.08 Trojan.Generic.328670
CAT-QuickHeal 9.50 2008.08.08 -
ClamAV 0.93.1 2008.08.08 -
DrWeb 4.44.0.09170 2008.08.08 Trojan.Realife
eSafe 7.0.17.0 2008.08.07 -
eTrust-Vet 31.6.6019 2008.08.08 -
Ewido 4.0 2008.08.07 -
F-Prot 4.4.4.56 2008.08.07 -
F-Secure 7.60.13501.0 2008.08.08 FraudTool.Win32.AntivirusProtection
Fortinet 3.14.0.0 2008.08.08 -
GData 2.0.7306.1023 2008.08.08 -
Ikarus T3.1.1.34.0 2008.08.08 Generic.Win32.Malware.AntivirusProtection
K7AntiVirus 7.10.407 2008.08.07 -
Kaspersky 7.0.0.125 2008.08.08 not-a-virus:FraudTool.Win32.AntivirusProtection
McAfee 5356 2008.08.07 FakeAlert-Y
Microsoft 1.3807 2008.08.08 Program:Win32/AntivirusProtection
NOD32v2 3339 2008.08.08 -
Norman 5.80.02 2008.08.06 -
Panda 9.0.0.4 2008.08.07 -
PCTools 4.4.2.0 2008.08.07 -
Prevx1 V2 2008.08.08 Fraudulent Security Program
Rising 20.56.41.00 2008.08.08 -
Sophos 4.32.0 2008.08.08 -
Sunbelt 3.1.1537.1 2008.08.07 -
Symantec 10 2008.08.08 SpyDestroy
TheHacker 6.2.96.394 2008.08.08 -
TrendMicro 8.700.0.1004 2008.08.08 -
VBA32 3.12.8.3 2008.08.07 Trojan.Realife
ViRobot 2008.8.7.1328 2008.08.07 -
VirusBuster 4.5.11.0 2008.08.07 -
Webwasher-Gateway 6.6.2 2008.08.08 Riskware.FakeAV.B
 
Additional information
File size: 533020 bytes
MD5…: b04155d9d84605eb854b51e7a58c161b
SHA1..: d0e7b7e117c733a8a0eb0f702d7cc2b39bbb3521
SHA256: d8d8e97e6a5b5baff66357cbcf06a96dec70e4e5a3e3a98aef0cd828158b2556
SHA512: 4f9bf586f982cbe24083467e74d79f8bfc08d690f8f98a0bd6eecfccd6c1c011
6a82d3349a952af5c6d85a4bcfb59fbfc1b619b0f7ce70c19bacdb3901918f5c
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0×403137
timedatestamp…..: 0×4436a86e (Fri Apr 07 17:59:10 2006)
machinetype…….: 0×14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0×1000 0×5874 0×5a00 6.39 79e0c9546f9b938bb7f605623114f805
.rdata 0×7000 0×10f2 0×1200 5.06 91271e85c1048ae5a465a5a9d34af29f
.data 0×9000 0×1b3f4 0×400 5.07 3dbf52131f08fdb4f69eeddf57a5a444
.ndata 0×25000 0×9000 0×0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rsrc 0×2e000 0xe78 0×1000 3.67 42e5c13435f1bcd656cb4dbe956c3f87

( 8 imports )
> KERNEL32.dll: CloseHandle, SetFileTime, CompareFileTime, SearchPathA, GetShortPathNameA, GetFullPathNameA, MoveFileA, SetCurrentDirectoryA, GetFileAttributesA, GetLastError, CreateDirectoryA, SetFileAttributesA, Sleep, GetFileSize, GetModuleFileNameA, GetTickCount, GetCurrentProcess, lstrcmpiA, ExitProcess, GetCommandLineA, GetWindowsDirectoryA, GetTempPathA, lstrcpynA, GetDiskFreeSpaceA, GlobalUnlock, GlobalLock, CreateThread, CreateProcessA, RemoveDirectoryA, CreateFileA, GetTempFileNameA, lstrlenA, lstrcatA, GetSystemDirectoryA, lstrcmpA, GetEnvironmentVariableA, ExpandEnvironmentStringsA, GlobalFree, GlobalAlloc, WaitForSingleObject, GetExitCodeProcess, SetErrorMode, GetModuleHandleA, LoadLibraryA, GetProcAddress, FreeLibrary, MultiByteToWideChar, WritePrivateProfileStringA, GetPrivateProfileStringA, WriteFile, ReadFile, MulDiv, SetFilePointer, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, CopyFileA
> USER32.dll: ScreenToClient, GetWindowRect, SetClassLongA, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongA, SetCursor, LoadCursorA, CheckDlgButton, GetMessagePos, LoadBitmapA, CallWindowProcA, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, EndDialog, AppendMenuA, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextA, GetDlgItemTextA, MessageBoxA, CharPrevA, DispatchMessageA, PeekMessageA, CreateDialogParamA, DestroyWindow, SetTimer, SetWindowTextA, PostQuitMessage, SetForegroundWindow, wsprintfA, SendMessageTimeoutA, FindWindowExA, RegisterClassA, SystemParametersInfoA, CreateWindowExA, GetClassInfoA, DialogBoxParamA, CharNextA, TrackPopupMenu, ExitWindowsEx, IsWindow, GetDlgItem, SetWindowLongA, LoadImageA, GetDC, EnableWindow, InvalidateRect, SendMessageA, DefWindowProcA, BeginPaint, GetClientRect, FillRect, DrawTextA, EndPaint, ShowWindow
> GDI32.dll: SetBkColor, GetDeviceCaps, DeleteObject, CreateBrushIndirect, CreateFontIndirectA, SetBkMode, SetTextColor, SelectObject
> SHELL32.dll: SHGetMalloc, SHGetPathFromIDListA, SHBrowseForFolderA, SHGetFileInfoA, ShellExecuteA, SHFileOperationA, SHGetSpecialFolderLocation
> ADVAPI32.dll: RegQueryValueExA, RegSetValueExA, RegEnumKeyA, RegEnumValueA, RegOpenKeyExA, RegDeleteKeyA, RegDeleteValueA, RegCloseKey, RegCreateKeyExA
> COMCTL32.dll: ImageList_AddMasked, ImageList_Destroy, -, ImageList_Create
> ole32.dll: OleInitialize, OleUninitialize, CoCreateInstance
> VERSION.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=2E03D43B1CD9E201228C08CA3437E000ED8AA5A3
ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=b04155d9d84605eb854b51e7a58c161b

Antivirus Protection

Host: software666.com
IP: 64.15.147.89

Whois:

OrgName:    Groupe iWeb Technologies inc.
OrgID:      GIT-20
Address:    20, place du Commerce
City:       Montreal
StateProv:  QC
PostalCode: H3E-1Z6
Country:    CA
OrgAbuseName:   Abuse Coordinator
OrgAbusePhone:  +1-514-286-4242
OrgAbuseEmail:  abuse@nic.privatedns.com

Other:

1.  Beleamp3.com 
2.  Foume.com 
3.  Hi5gold.com 
4.  Hi5kiss.com 
5.  Maneletube.com 
6.  Onzig.com 
7.  Romania-eu.org 
8.  Software666.com 
9.  Turismroma.com 

Host: virusscan.triplequadturbo.com
IP: triplequadturbo.com

Whois:

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US
OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

Host: virusscansite.com
IP: 64.40.117.34

Whois:

OrgName:    NetNation Communications Inc
OrgID:      NNC
Address:    Bentall Tower 5, Suite 200
Address:    550 Burrard Street
City:       Vancouver
StateProv:  BC
PostalCode: V6C-2B5
Country:    CA
RTechHandle: IN8-ARIN
RTechName:   NetNation Commmunications, Inc.
RTechPhone:  +1-604-688-8946
RTechEmail:   abuse@netnation.com

Other sites:

1.  3000channelsplus.com 
2.  3000pluschannels.com 
3.  70-music.com 
4.  80-music.com 
5.  90-music.com 
6.  Addetect.com 
7.  Adoptionwebsearch.com 
8.  Adsniffer.com 
9.  Advertisercash.com 
10.  Adwarebust.com 
11.  Adwarecommander.com 
12.  Adwaregold.com 
13.  Adwarepatrol.com 
14.  Adwareplatinum.com 
15.  Adwareprotectionsite.com 
16.  Adwareremoverxp.com 
17.  Adwaresafety.com 
18.  Adwarescansite.com 
19.  Adwaretools.com 
20.  Adwarexp.com 
21.  Adwarexterminator.com 
22.  Affiliatecashbot.com 
23.  Affiliatescashin.com 
24.  Affiliatevip.com 
25.  Alldigitalchannels.com 
26.  Allmoviesnow.net 
27.  Allmusic-downloads.com 
28.  Americanautobargains.com 
29.  Antispamassistant.com 
30.  Antispamdeluxe.com 
31.  Antispamgold.com 
32.  Antispyadvanced.com 
33.  Antispywarexp.com 
34.  Antivirus-solution.net 
35.  Antiviruspremium.com 
36.  Antivirusprogramsite.com 
37.  Antivirusprotectionsite.com 
38.  Antivirusprotectorsite.com 
39.  Antivirusultra.com 
40.  Antiviruswebsite.com 
41.  Antiviruswebsitereviews.com 
42.  Ares-downloadnow.com 
43.  Aresdeluxe.com 
44.  Aresdownloadnow.com 
45.  Autobargainsnetwork.com 
46.  Baptismrecords.com 
47.  Bearflixsoftware.com 
48.  Best-nettv.com 
49.  Best-webtv.com 
50.  Bestonlinereviews.net 
51.  Better-fitness.com 
52.  Bloggingforsuccess.com 
53.  Cdcopysite.com 
54.  Cdtomp3site.com 
55.  Commissionsystem.com 
56.  Completedigitaltv.com 
57.  Completedownloadcenter.com 
58.  Consumerfavorite.com 
59.  Courtrecordfinder.com 
60.  Courtrecordslookup.com 
61.  Customersupporthome.com 
62.  Cybermembersarea.com 
63.  Datainfoplace.com 
64.  Dateanybabe.com 
65.  Datingdoctorsite.com 
66.  Desktopsatellitetv.com 
67.  Detectiveadvanced.com 
68.  Detectivehound.com 
69.  Detectivelookup.com 
70.  Detectivenetsearch.com 
71.  Detectivesearches.com 
72.  Detectivewatch.com 
73.  Digitaldishsoftware.com 
74.  Digitaltv2pc.com 
75.  Digitaltvsoftware.com 
76.  Digitaltvtopc.com 
77.  Disccopyplus.com 
78.  Disccopypro.com 
79.  Dloadinfo.com 
80.  Doctoradware.com 
81.  Doctoradwarepro.com 
82.  Dogproblemsite.com 
83.  Dogproblemswebsite.com 
84.  Download-ares-free.com 
85.  Download-shareaza-free.com 
86.  Downloadacceleratornow.com 
87.  Downloadaresnow.com 
88.  Downloadbestfirewalls.com 
89.  Downloadcharge.com 
90.  Downloadingcharge.com 
91.  Downloadingnet.com 
92.  Downloadingpro.com 
93.  Downloadmoviewebsite.com 
94.  Downloadnerd.com 
95.  Downloadsignup.com 
96.  Drivingwebrecords.com 
97.  Dvdcdcopypro.com 
98.  Dvdcopysitereviews.com 
99.  Dvdtocdexpert.com 
100.  Dvdtocdsite.com 
101.  Dvdxpremium.com 
102.  Dvdxultra.com 
103.  E-mp3now.com 
104.  Easycdrip.com 
105.  Easycopynow.com 
106.  Easydvdburn.com 
107.  Easymovieplayer.com 
108.  Easypspdownloads.com 
109.  Edetectivesite.com 
110.  Emp3network.com 
111.  Erasehistorynow.com 
112.  Expertbucks.com 
113.  Expertcash.com 
114.  Explosioncash.com 
115.  Extremepaidsurveys.com 
116.  Ezdvdx.com 
117.  Fastmp3network.com 
118.  File-sharing-reviews.com 
119.  Filevoom.com 
120.  Filevoom.net 
121.  Filevoom.org 
122.  Filevoompro.com 
123.  Firewallprotectionpro.com 
124.  Firewallprotectionsite.com 
125.  Firewallprotector.com 
126.  Flashdollars.com 
127.  Footballnetworks.net 
128.  Free-ares-music.com 
129.  Free-azureus-downloads.com 
130.  Free-bearflix-downloads.com 
131.  Free-bearshare-downloads.com 
132.  Free-bitcomet-downloads.com 
133.  Free-bitlord-downloads.com 
134.  Free-bittornado-downloads.com 
135.  Free-bittorrent-downloads.com 
136.  Free-downloadz.com 
137.  Free-emule-downloads.com 
138.  Free-frostwire-downloads.com 
139.  Free-imesh-downloads.com 
140.  Free-klite-downloads.com 
141.  Free-limewire-now.com 
142.  Free-morpheus-downloads.com 
143.  Free-soulseek-downloads.com 
144.  Fullpaidsurveys.com 
145.  Fullsoftwarecenter.com 
146.  Futurehometv.com 
147.  Gamedownloadpro.com 
148.  Gameproadvance.com 
149.  Games2pc.com 
150.  Gamewebsitereviews.com 
151.  Get-webtv.com 
152.  Getdownloadmovies.com 
153.  Getfilevoom.com 
154.  Gethotgames.com 
155.  Getlivebaseballtv.com 
156.  Getlivebasketballtv.com 
157.  Getlivefootballtv.com 
158.  Getlivehockeytv.com 
159.  Getlivesoccertv.com 
160.  Getnetmovies.com 
161.  Getnetmusic.com 
162.  Getpcmovies.com 
163.  Getpcmusic.com 
164.  Getsoftwaredeals.com 
165.  Getultimatelivetv.com 
166.  Giantpartner.com 
167.  Go-nettv.com 
168.  Gogosearches.com 
169.  Gogotoolbar.com 
170.  Gohotmusic.com 
171.  Goldensurvey.com 
172.  Goldstarreviews.net 
173.  Great-nettv.com 
174.  Grogster.com 
175.  Guyvsgirl.com 
176.  Historycleanup.com 
177.  Historywashdown.com 
178.  Hot-webtv.com 
179.  Hotinternettv.com 
180.  Hotmp3music.com 
181.  Hotmp3now.com 
182.  Hotmusicfast.com 
183.  Huntdetective.com 
184.  I-mp3access.com 
185.  I-mp3music.com 
186.  I-pspaccess.com 
187.  I-zuneaccess.com 
188.  Imoviedownloads.net 
189.  Imusic-store.com 
190.  Imusicadvance.com 
191.  Incrediblechannels.com 
192.  Incredibletv.com 
193.  Infodownloading.com 
194.  Infowebdownload.com 
195.  Internetdownloading.net 
196.  Internetdownloads.net 
197.  Internetdownloadstore.com 
198.  Internettv-pro.com 
199.  Iphoneaccessnow.com 
200.  Ipod-wiz.com 
201.  Ipoddownloadingpro.com 
202.  Ipodflow.com 
203.  Ipodnetdownloads.com 
204.  Ipodnetmovies.com 
205.  Ipodwebsitereviews.com 
206.  Isoftwaretv.com 
207.  Itunes-planet.com 
208.  Itvdownload.com 
209.  Izuneaccess.com 
210.  Jeaks.com 
211.  K-litegold.com 
212.  K-litetk.com 
213.  K9instructor.com 
214.  Kazz.com 
215.  Kl-kpp.net 
216.  Klitegeneration.com 
217.  Klitegold.com 
218.  Live-nettv.com 
219.  Live-tv-net.com 
220.  Liveultimatetv.com 
221.  Madgreen.com 
222.  Magicrevenue.com 
223.  Masterpsp.com 
224.  Maxpaidsurveys.com 
225.  Maxpdf.com 
226.  Mediaburning.com 
227.  Microantivirusxp.com 
228.  Moviedownloadaccess.com 
229.  Moviedownloadreview.biz 
230.  Moviedownloadscenter.com 
231.  Moviedownloadsnow.net 
232.  Movieproadvance.com 
233.  Moviesforpc.com 
234.  Moviewebsitereviews.com 
235.  Moviewiz.net 
236.  Mp3downloadingsite.com 
237.  Mp3musicdirect.com 
238.  Mp3musichit.com 
239.  Mp3musicpro.com 
240.  Mp3playerdirect.com 
241.  Mp3review.biz 
242.  Mp3section.com 
243.  Music-software-online.com 
244.  Musicmoviezone.com 
245.  Musicplayer-downloads.com 
246.  Musicplayercenter.com 
247.  Musicwebsitereviews.com 
248.  My-ipodaccess.com 
249.  Myaresdownloads.com 
250.  Mybollywoodtv.com 
251.  Myfuturetv.com 
252.  Mypspcenter.com 
253.  Mypspdownload.com 
254.  Mypspsource.com 
255.  Mytvdownloads.com 
256.  Myvirusguardian.com 
257.  Myzunedownload.com 
258.  Myzunedownloads.com 
259.  Netbackgroundchecks.com 
260.  Netfreedownloads.com 
261.  Netmusichome.com 
262.  Netonlineinvestigator.com 
263.  Netonlineinvestigators.com 
264.  Netpaidshopping.com 
265.  Netpspdownloads.com 
266.  Netpspmovies.com 
267.  Netsoftwarecorp.com 
268.  Netsoftwareinc.com 
269.  Netsoftwaretool.com 
270.  Netwebinvestigator.com 
271.  Newdownloading.com 
272.  Newest-music.com 
273.  Newexpertreviews.com 
274.  Newiphonedownloads.com 
275.  Newmovieflicks.com 
276.  Newpspdownloads.com 
277.  Newvoomtube.com 
278.  Nexthometv.com 
279.  Officialdvdcopy.com 
280.  Onedownloading.com 
281.  Onlinemoneypack.com 
282.  Onlineprotv.com 
283.  Onlinetvtopc.com 
284.  Penile-enlargement.biz 
285.  Peoplepageslookup.com 
286.  Peopleregistry.info 
287.  Peoplesearchengine.info 
288.  Pestbot.com 
289.  Pestguardian.com 
290.  Pestprotector.com 
291.  Poperkiller.com 
292.  Popprotection.com 
293.  Popup-protection.com 
294.  Popupblockersite.com 
295.  Popupkillersite.com 
296.  Popupprotectionsite.com 
297.  Popupsystem.com 
298.  Popwash.com 
299.  Premiumstations.com 
300.  Proadware.com 
301.  Promotercash.com 
302.  Psp-downloadsnow.com 
303.  Pspflow.com 
304.  Pspnetdownloads.com 
305.  Pspwebsitereviews.com 
306.  Pureaffiliates.com 
307.  Puredvdcopy.com 
308.  Qualitychannels.com 
309.  Qualitytvtopc.com 
310.  Quickdvdcopies.com 
311.  Quickdvdcopy.com 
312.  Quickdvdcopy.net 
313.  Quickfreemovies.com 
314.  Quickipoddownloads.com 
315.  Realonlinetv.com 
316.  Registryadvance.com 
317.  Registryassistant.com 
318.  Registrydebug.com 
319.  Registryfixup.com 
320.  Registryrepairsite.com 
321.  Repocarfinder.com 
322.  Reversednscheck.com 
323.  Reverseipsearch.com 
324.  Safesharing.com 
325.  Satellitelivetopc.com 
326.  Shareazasite.com 
327.  Sms-official.com 
328.  Songrush.com 
329.  Specialchannels.com 
330.  Spyadvanced.com 
331.  Spywarecommander.com 
332.  Spywaredeluxe.com 
333.  Spywareprotectionsite.com 
334.  Spywareremoversite.com 
335.  Spywarescansite.com 
336.  Spywarexp.com 
337.  Systemdollars.com 
338.  Taxlookups.com 
339.  The-internet-tv.com 
340.  The-rich-kid.com 
341.  Theaffiliatenetworks.com 
342.  Thecreditcheckers.com 
343.  Thepcsatellite.com 
344.  Thespamblock.com 
345.  Top-moviedownloads.com 
346.  Topchoicereviews.net 
347.  Topmoviehits.com 
348.  Topmp3choices.com 
349.  Topratedreview.net 
350.  Tv-onlinepro.com 
351.  Tvdigitalchannels.com 
352.  Tvdownloadonline.com 
353.  Tvnowsite.com 
354.  Tvonline-pro.com 
355.  Tvonline-sports.com 
356.  Tvonlinepro.com 
357.  Tvproonline.com 
358.  Tvrevenue.com 
359.  Tvsatellitetopc.com 
360.  Tvshowsaccess.com 
361.  Tvshowsfast.com 
362.  Tvsuperior.com 
363.  Ultimatemp3player.com 
364.  Ultimatevideosite.com 
365.  Ultramoviedownloads.com 
366.  Ultramusicdownloads.com 
367.  Virusnuke.com 
368.  Virusprotectionxp.com 
369.  Virusscansite.com 
370.  Voomtube.com 
371.  Voomtube.net 
372.  Voomtubenow.com 
373.  Watch-webtv.com 
374.  Watchinternettvnow.com 
375.  Waterpowerforcar.com 
376.  Web-tvonline.com 
377.  Webiphoneaccess.com 
378.  Webiphonedownloads.com 
379.  Webipoddownload.com 
380.  Webmoviesreview.com 
381.  Webmp3files.com 
382.  Webpspdownload.com 
383.  Webspeedplus.com 
384.  Webzuneaccess.com 
385.  Weightlossfirst.com 
386.  Wiredworldtv.com 
387.  Worldtvaccess.com 
388.  Worldwidestreams.com 
389.  Worldwiredpc.com 
390.  Worldwiredtv.com 
391.  Zmusicdownloads.com 
392.  Zune-access.com 
393.  Zunedownloadnow.com 

Host: antivirusprotectionsite.com
IP: 64.40.117.34

Whois  of IP domain antivirusprotectionsite.com distributing fake antivirus Antivirus Protection :

OrgName:    NetNation Communications Inc
OrgID:      NNC
Address:    Bentall Tower 5, Suite 200
Address:    550 Burrard Street
City:       Vancouver
StateProv:  BC
PostalCode: V6C-2B5
Country:    CA
RTechHandle: IN8-ARIN
RTechName:   NetNation Commmunications, Inc.
RTechPhone:  +1-604-688-8946
RTechEmail:   abuse@netnation.com

Host: signupprocess.com
IP: 69.77.188.84

Whois of IP 69.77.188.84 of domain signupprocess.com selling pseudo antivirus Antivirus Protection :

OrgName:    Toronto Hydro Telecom
OrgID:      THTI
Address:    431 Horner Avenue
City:       Toronto
StateProv:  ON
PostalCode: M8W-4W3
Country:    CA
OrgNOCHandle: THTIN-ARIN
OrgNOCName:   THTI NOC
OrgNOCPhone:  +1-416-542-2525
OrgNOCEmail:  noc@thtelecom.ca

Other sites:

1.  Bundleway.com 
2.  Ordersignup.com 
3.  Signupprocess.com 
4.  Signupsystem.com 
5.  Signupway.com 

Antivirus Protection

Tags: , , ,
Posted in Malware, Rogues | 1 Comment »

Page 1 of 11

© 2009 - CleanThe.Net  Remove Virus |  Contact US |  Advertising |  Report Malware/Virus |  Glossary