More new Fake Codec sites

Some more new Fake codec sites distributing DNS changer Trojans.

avicodec.net
best-codec.com
cleancodec.net
demo-codec.net
democodec.net
end-codec.net
endcodec.net
hq-codec.net

Note that the the Registrars of the above sites is ESTDOMAINS.

Donot download or install any file from these sites.

New Fake codec sites

New set of fake codec sites producing DNS changer Trojans.

Note that the Registrar of all these sites is ESTDOMAINS.

Stay away from them.

abc-codec.com
brakecodec.net
city-codec.com
citycodec.net
clean-codec.net
demo-codec.com
end-codec.com
firecodec.net
game-codec.com
giga-codec.com
hero-codec.com
hope-codec.com
hq-codec.com
ix-codec.com
jetcodec.net
megazcodec.com
nitrocodec.net
operacodec.com
qaz-codec.net
red-codec.net
spacecodec.net
storm-codec.com
uin-codec.net
ultracodec.net
viva-codec.com
white-codec.com
wotcodec.com
xero-codec.com
xvid-codec.org
zerocodec.net

AntiSpyware-2008

AntiSpyware-2008 is a Rogue application

Following websites distribute AntiSpyware-2008:

antispyware-2008-download.com
antispyware-2008-download.net
antispyware-2008-download.info
antivirus2008pro-download.com
antivirus2008pro-download.net
antivirus2008pro-download.info
antispyware2008-download.com
antispyware2008-download.net
antispyware2008-download.info
antivirus2008-pro.com
antivirus2008-pro.net
antivirus2008-pro.info
anti-spy-ware-2008.com
antispyware2008y.com

antispyware-2008.info

Screenshots:

Installation

It usually drops the following files n folders:


Fake scanner page:

TotalAntivirus

Totalantivirus is a new rogue application

Totalantivirusonline.com

TotalAntivirus

Domain Name: Totalantivirusonline.com
Status: ok
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.publicdomainregistry.com
Referral URL: http://www.publicdomainregistry.com
Expiration Date: 2009-03-31
Creation Date: 2008-03-31
Last Update Date: 2008-05-31
Name Servers:
ns1.mynick.name
ns2.mynick.name
ns3.mynick.name
ns4.mynick.name

IP Address: 72.233.81.107
IP Location: United States
Website Status: active
Server Type: Apache
Cache Date: 2008-07-01 07:05:50 MST