Sunbeltblog reported (1, 2) about two fresh fake codes sites. Strcodec MP Video Codec Add both sites in to your blocklist. Use follow info: 69.50.160.58 Mpcodec.com 85.255.118.194 strcodec.com Related articles: How to remove malicious codecs.
For the past several days, ISC have received all kinds of emails about the recent increase in scanning on port 139. One of loyal readers out there on the ‘Information SuperHighway’, Alex Pettinger, wrote and and gave us some netstat and fport outputs from one of his machines that seemed to be affected by the
Free Sophos Anti-Rootkit, finds and removes any rootkit that is hidden on your computer. Removing rootkits without compromising system integrity is particularly challenging and needs to be done with care.
Spywareguide reported about site enticing an end-user to install something they think they need, only to pull the rug out from under them and reveal that (in actual fact), is was this program over here that they needed all along! The site is a typical free movies / webcam website. This site displays numerous videos
Adware comes in all forms, and this time, it’s under the false pretense of being Webroot’s Spysweeper 5. To be specific, there is a torrent for SpySweeper 5 that comes with a “keygen” to bypass registration, but when executed it is actually adware —a 180solutions installer. It immediately connects to the net and then installs
PandaLabs has discovered that Browsezilla, a free web browser available on several web pages, infects computers with the adware PicsPlace, without users’ knowledge. This adware, which activates whenever a user starts up the infected PC, opens a series of adult web pages, although they are not visible to the user. This tactic is aimed at
Sunbeltblog reported about new rogue antispyware SpyHeal. This is probably the replacement for Spyware Quake (or SpywareQuake). Sysprotectionpage(dot)com showed spyheal(dot)com as one of the new partner sites and some rogue anti spyware apps also. After opening Sysprotectionpage(dot)com, i have got message: Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to
A new piece of very nasty malware has been recently discovered on spyware help forums, first here and again here. The file name is wgavn.exe and it creates a service named “Windows Genuine Advantage Validation Notification”, as seen in this line in the HijackThis log. O23 – Service: Windows Genuine Advantage Validation Notification (wgavn) –
CA has received reports of Win32/Bambo.CF being distributed via SMS text messages sent to mobile phones, enticing people to visit a malicious website. The messages may contain the following: Thanks for subscribing to *****.com dating service. If you don’t unsubscribe you will be charged $2 per day. The text message then directs the recipient to
Found new rogue antispyware – AdwareFinder. The program claims it detects and destroys spyware, yet it is part of engagemarketing(dot)com which is being bundled via Dollarrevenue. URL: www(dot)adwarefinder(dot)com/AdwareFinder_download(dot)html Thanks to Sunbeltblog.
