Search Results for: google play
Russian’s don’t infect themselves?
Little snippet found in Antivirus 2009: 00420054 – http://privaetprotectedupdates com/zsa09/winsystems dll0042008C -————————————————————————————————————————00420105 -——————————————————————————00420174 – Bot started.0042018C – App name:004201A0 – Exe name:004201B4 – Bot ID:004201C8 – Wait before activate:004201E8 – Sleep period:00420200 – Popup URL:00420214 – Don`t install on Rus:00420234 …
Skanks in more ways than one
Liskula Cohen is suing Google to reveal the source of some nasty comments on a Blogger blog, called Skanks in NYC (the blog itself is here). Since Liskula has now created a Streisand Effect, many people will assuredly be searching …
The Innovative Marketing saga continues
Fascinating reading here from the FTC complaint. Highlights: Over 1 million PC users have been scammed by Innovative and its affiliates. At $40 a pop, that’s $40 million in ill-gotten revenue. Forget refunds. According to the FTC, “although some consumers …
New Mac rogue?
This site is a sister to WiniGuard, a rogue antispyware program related to Innovagest 2000… a noted bad actor… However, there are no downloadable binaries. Something to keep an eye on, though. Just to put this into context, we’ve seen …
This MySpace Friend is anything but
If you get this Friend Request in MySpace, it’s not a good one. Here’s the profile page: However, clicking on the page brings up this oddball page: Notice the use of a “translate” page on Google. Possible a new redirect …
AOL, non-benign neglect
Nothing really new here but I figured I’d say something on the subject: AOL has some malware floating around. Some examples: AOL’s German Hometown page has a number of pages that redirect to rogue antivirus programs like Antivirus XP (note …
Google Chrome
I’ve only been playing with it for a few minutes. First impression? Wow. This thing smokes. Now, my opinion may change, it’s very early, but I like what I see — a lot. I absolutely recommend downloading it and taking …
Folks, this is the new wave: SWF file redirects continue
In an earlier blog post, I mentioned that spammers are now using Shockwave Flash (SWF) files to avoid detection (similar in nature to the trick of using Google redirects, etc. in the past). This continues. Here’s a current example: This …
The continuing problem of malware being advertised in Google Adwords
Google continues to have a problem with malware being advertised in Google Adwords, in this case, for the trojan Antivirus XP 2008. Examples: and An exacerbating part of the problem, of course, is that Google Adwords are massively syndicated to …
Hijacking Google
Something cute that we saw with an Antivirus XP 2008 install (to clarify, this is a fake error page generated through a running process from the Antivirus XP 2008 Trojan). When I get some time, I hope to get a …










