Beware: Wolves in sheeps clothing found on different sites (security scams)



This is another “wolf in sheeps clothing” alert. The Sunbelt blog has information and tips on a number of other sites that are posing as either the Windows security center page, or a page not found error. The windows security center spoof once again claims the following “Attention! Your system is under control of remote computer with IP address >>>>>>> The remote computer has access to the following folders on your PC: windowssystem32 program filesinternet explorer my documents drive C; files, click here to download official anti-spyware software. Your private info is collected by w32.sinnaka.a@mm”


The page not found spoof goes like this: “The page cannot be displayed: the pag eyou are looking for is currently unavailable. The web site might be experiencing technical difficulties or you may need to adjust your browser settings. Please try the following: Install Spy trooper software to clean your pc. If you typed the page address in the address bar….” the rest of the page seems to be the usual Microsoft IE page cannot be displayed template. The other note is that at the top of the page there is a windows information bar that says “The page you are looking for is blocked by the adware on your pc. Remove it with spy trooper software click here.”

From sunbelt here is a listing of the latest sites, and previously discovered sites as well:

Newly found sites

Mattie Muirhead
Florence, AL US
wm @ needupdate.com
85.255.115.174 dns404.net
85.255.115.130 needupdate.com
85.255.115.173 yoursystemupdate.com
85.255.115.172 systemwarning.com

Mag Dicacik

Praha, CZ

mag @ sexpicporn.com
85.255.115.172 securitywarnings.net

Sites already known

Henn Preson
Stockholm, SE
henn @ teeeen.com

85.255.115.130 Warningmessage.com

85.255.115.131 syserrors.com

Mag Dicacik
Praha, CZ
mag @ sexpicporn.com

85.255.115.131 notfound404.com
85.255.115.132 Updateyoursystem.com
85.255.115.170 securityerrors.com
85.255.115.179 hdnsservidce.com
85.255.115.180 downldboost.com

Network administrators may want to block IP addresses for these sites.

Related Posts

Blog Traffic Exchange Related Posts
  • Clamav 0.88.2 for Mandrake 10.0 rpms Since I have a few old Mandrake 10.0 servers out there churning along, I've rebuilt the Clamav package to reflect the recent security fix version 0.88.2 is up on the site at http://www.averyjparker.com/wp-content/downloads/clamav882/ As always, the rpms are here more for my convenience than anything else, rebuilt straight from the......
  • Zotob details Here are some details on the zotob worm (s) culled from several sources.... It copies itself to the Windows system folder as BOTZOR.EXE, it modifies the hosts file to frustrate attempts to access antivirus sites. The .b variant copies itself as csm.exe in the Windows System folder. Both variants create......
  • Network security - how safe is your network? Looking at ARP A while back I did a network security series and one of the points that I mentioned was that it's important to know what is normal for your network. In other words, what machines are NORMALLY connected, what services are normally running, etc. Well, I'm about to start a serious......
Blog Traffic Exchange Related Websites
  • Internet Marketing Flaw (function() {var s = document.createElement('SCRIPT'), s1 = document.getElementsByTagName('SCRIPT')[0];s.type = 'text/javascript';s.async = true;s.src = 'http://widgets.digg.com/buttons.js';s1.parentNode.insertBefore(s, s1);})(); 5Digg Digg (function() {var s = document.createElement(‘SCRIPT’), s1 = document.getElementsByTagName(‘SCRIPT’)[0];s.type = ‘text/javascript’;s.async = true;s.src = ‘http://widgets.digg.com/buttons.js’;s1.parentNode.insertBefore(s, s1);})(); 5 Digg Digg (function() {var s = document.createElement(‘SCRIPT’), s1 = document.getElementsByTagName(‘SCRIPT’)[0];s.type = ‘text/javascript’;s.async = true;s.src = ‘http://widgets.digg.com/buttons.js’;s1.parentNode.insertBefore(s, s1);})();......
  • Getting Traffic To Your Internet Home Based Business. (function() {var s = document.createElement('SCRIPT'), s1 = document.getElementsByTagName('SCRIPT')[0];s.type = 'text/javascript';s.async = true;s.src = 'http://widgets.digg.com/buttons.js';s1.parentNode.insertBefore(s, s1);})(); 5Digg Digg (function() {var s = document.createElement(‘SCRIPT’), s1 = document.getElementsByTagName(‘SCRIPT’)[0];s.type = ‘text/javascript’;s.async = true;s.src = ‘http://widgets.digg.com/buttons.js’;s1.parentNode.insertBefore(s, s1);})(); 5 Digg Digg (function() {var s = document.createElement(‘SCRIPT’), s1 = document.getElementsByTagName(‘SCRIPT’)[0];s.type = ‘text/javascript’;s.async = true;s.src = ‘http://widgets.digg.com/buttons.js’;s1.parentNode.insertBefore(s, s1);})();......
  • Day 1 of my fitness journey Day 1 so time for my weigh in and measure. The scientist in me wanted to record my baseline body measurements so if my weight loss plateaus I can hopefully stay motivated with some recordable inch losses. I chose 9 points to measure on my body which I've shown on......
en.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site