Tuesday, September 30, 2008

Antiviruspro2009.com

Antiviruspro2009.com is the misleading web-site that promotes latest rogue anti-spyware software (AntivirusPro 2009). Some trojan horses may hijack your homepage with Antiviruspro2009.com and redirect you to http://antiviruspro2009.com web-site. Antiviruspro2009.com may also generate fake security warnings and show "malware detection reports" to scare you and force to download AntispywarePro 2009. Download Antiviruspro2009 remover (Spywrae Doctor) to get rid of this nasty hijacker.

Antiviruspro2009 snapshot:


Antiviruspro2009 technical details:
Registration Service Provided By: REGISTER SERVICES
Contact: +001.8882106539
Domain Name: ANTIVIRUSPRO2009.COM
Registrant:
n/a
Feed Abramov ()
Arlengton Ave. 38-478
n/a
n/a
London
UK,GT5-AL8
GB
Tel. +314.8492657290
Creation Date: 28-Sep-2008
Expiration Date: 28-Sep-2009
Domain servers in listed order:
ns2.antiviruspro2009.com
ns1.antiviruspro2009.com
Administrative Contact:
n/a
Feed Abramov ()
Arlengton Ave. 38-478
n/a
n/a
London
UK,GT5-AL8
GB
Tel. +314.8492657290
Technical Contact:
n/a
Feed Abramov ()
Arlengton Ave. 38-478
n/a
n/a
London
UK,GT5-AL8
GB
Tel. +314.8492657290
Billing Contact:
n/a
Feed Abramov ()
Arlengton Ave. 38-478
n/a
n/a
London
UK,GT5-AL8
GB
Tel. +314.8492657290
Status:ACTIVE

Monday, September 29, 2008

Antivirxp.net

Antivirxp.net is a new way to promote fake spyware remover Antivirus XP 2008. You may be infected with related hijacker that would set your browser home-page to www.antivirxp.net. This site may contain malicious scripts, except that understandable going without saying fact of adverting useless and harmful product.
For normal functioning of your PC and to stave off danger of its hard damaging by the hijacker and of related threats upload (for instance, assumption can be made that through the malicious scripts of www.antivirxp.net trial of Antivirus XP 2008 will be installed). Click here to scan your PC free of charge and remove www.antivirxp.net hijacker. Needless to say, you should avoid visiting this site.

Antivirxp.net screenshot:


Antivirxp.net technical details:
Registrant Contact:
AV Group, inc
Dee R. Sawyer
+1.5732639880 fax: +1.5732639880
4374 Penn Street
Manchester MO 63011
us
Administrative Contact:
Dee R. Sawyer
+1.5732639880 fax: +1.5732639880
4374 Penn Street
Manchester MO 63011
us
Technical Contact:
Dee R. Sawyer
+1.5732639880 fax: +1.5732639880
4374 Penn Street
Manchester MO 63011
us
Billing Contact:
Dee R. Sawyer
+1.5732639880 fax: +1.5732639880
4374 Penn Street
Manchester MO 63011
us
DNS:
ns1.antivirxp.net
ns3.antivirxp.net
Created: 2008-09-02
Expires: 2009-09-02

Antivirusfulldefence.com

Antivirusfulldefence.com is the latest misleading web-site that promote rogue anti-spyware applications. Antivirusfulldefence.com may hijack your homepage and redirect to fake malware scanners (see screenshot below) to scare users and force to buy 100% scamware (Antivirus 2009 fake malware remover). To detect and remove Antivirusfulldefence.com hijacker for good - download Spyware Doctor.

Antivirusfulldefence.com screenshot:



Antivirusfulldefence.com technical details:

Domain Name: ANTIVIRUSFULLDEFENCE.COM
Registrant:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 09-Sep-2008
Expiration Date: 09-Sep-2009
Domain servers in listed order:
36063.mars.orderbox-dns.com
36063.earth.orderbox-dns.com
36063.venus.orderbox-dns.com
36063.mercury.orderbox-dns.com
Administrative Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Status:ACTIVE


Wednesday, September 24, 2008

A-vxp08.net

A-vxp08.net and avxp08.net are two domains from which Antivirus XP 2008 (AntivirusXP2008) is propagated and can be purchased. Stay away from these web-sites as well as from Antivirus XP 2008 (AntivirusXP2008). The above sites were unavailable as of the date of this post creation. However, we expect this is not a permanent state of these domains and they may soon be restored and will contain malicious scripts. If you have already been infected with Antivirus XP 2008 (AntivirusXP2008) or a-vxp08.net and avxp08.net have hijacked your browser home-page, take urgent steps to remove Antivirus XP 2008 (AntivirusXP2008) and related malware. The infection may be not obvious and its detection is often problematic at the first stage. However, the sooner removal of Antivirus XP 2008 (AntivirusXP2008) is done, the more moderate damage would be caused or the damage could be completely prevented. Scan your PC free of charge (using Spyware Doctor) to discover malware immediately and get rid of Antivirus XP 2008 (AntivirusXP2008) and related malware.

A-vxp08.net snapshot:

A-vxp08.net technical details:
Domain Name:a-vxp08.net
Record created:2008/9/16
Record expired:2009/9/16

Domain servers in listed order:
ns1.a-vxp08.net ns3.a-vxp08.net

Administrat:
name-- DNS MANAGER
org-- ABSOLUTEE CORP. LTD.
country-- CN
province-- Hongkong
city-- Hongkong
address-- FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode-- 999077
telephone-- +00.85223192933
fax-- +00.85223195168
E-mail--
Technical Contact:
name-- DNS MANAGER
org-- ABSOLUTEE CORP. LTD.
country-- CN
province-- Hongkong
city-- Hongkong
address-- FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode-- 999077
telephone-- +00.85223192933
fax-- +00.85223195168
E-mail--
Billing Contact:
name-- DNS MANAGER
org-- ABSOLUTEE CORP. LTD.
country-- CN
province-- Hongkong
city-- Hongkong
address-- FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode-- 999077
telephone-- +00.85223192933
fax-- +00.85223195168
E-mail--
Registrant Contact:
name-- DNS MANAGER
org-- ABSOLUTEE CORP. LTD.
country-- CN
province-- Hongkong
city-- Hongkong
address-- FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode-- 999077
telephone-- +00.85223192933
fax-- +00.85223195168
E-mail--

Asafetysite.com

Immediately get rid of http://asafetysite.com/security/vista/ and http://asafetysite.com/security/xp/, which are two varieties of the same browser hijacker, both cloned after notorious Security Center web-sites. They are pretty the same with previous releases of hijackers from Security Center. After entering any of these sites, users can see the table named Investigation Report: Summary. This report comprises identification of visitor’s country and IP address apparently to produce impression on the potential victims. Easy trick, we have to remark! However, it is much harder to detect visitor’s browser. In our tests it was always identified as Mozilla, no matter that it was never Mozilla actually. This sin, unfortunately, is not the worst to Security Center. Much worse thing is that this Security Center secretly downloads malicious dll-files to your computer. These files ensure instant hijacking of your home-page and facilitate upload of malware trials. You need a good malware removal tool to fix this problem. Scan your PC free of charge and remove http://asafetysite.com/security/vista/ and http://asafetysite.com/security/xp/ (Security Center) hijackers using Syware Doctor. Tip: ignore alert referring to W32.Myzor.FK@yf. A real danger comes from Security Center hijacker.

Asafetysite.com snapshot:


Asafetysite.com technical details:
Domain Name: ASAFETYSITE.COM
Registrant [1529771]:
Moniker, Privacy Services
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Administrative Contact [1529771]:
Moniker, Privacy Services
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Phone: +1.9549848445
Fax: +1.9549699155
Billing Contact [1529771]:
Moniker, Privacy Services
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Phone: +1.9549848445
Fax: +1.9549699155
Technical Contact [1529771]:
Moniker, Privacy Services
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Phone: +1.9549848445
Fax: +1.9549699155
Domain servers in listed order:
NS1.ASAFETYSITE.COM 91.203.92.11
NS2.ASAFETYSITE.COM 91.203.92.12
Record created on: 2008-09-19 03:36:35.0
Database last updated on: 2008-09-19 03:41:32.903
Domain Expires on: 2009-09-19 03:36:36.0

Tuesday, September 23, 2008

Antispyware-review.biz

PC Antispy and PC Clean Pro, if installed at your PC, should be immediately removed. Both these malicious applications were concocted to milk money from the pockets of credulous users. Moreover, they have additional invention for promotion, if this word is applicable to such a cheeky intrusion. Antispyware-review.biz is a browser hijacker that contains malicious scripts. This site may become your home-page against your will. Malicious dll-file is installed to this purpose and, usually, very soon other rogues are uploaded. Remove Smart Soft Reviews hijacker (antispyware-review.biz/ may be not a single address of this web-page). To scan your PC for malware free of charge and to get rid of Smart Soft Reviews hijacker (http://www.antispyware-review.biz/ may be not a single address of this web-page), click here.

Antispyware-review.biz snapshot:


Antispyware-review.biz technical details:
Domain Name: ANTISPYWARE-REVIEW.BIZ
Domain ID: D24510903-BIZ
Sponsoring Registrar: ESTDOMAINS INC
Sponsoring Registrar IANA ID: 832
Domain Status: ok
Registrant ID: DI_8046068
Registrant Name: Julio Antonio Ramirez
Registrant Organization: NA
Registrant Address1: Rivadavia 18
Registrant City: Caracas
Registrant State/Province: Distrito Capital
Registrant Postal Code: 1054
Registrant Country: Venezuela
Registrant Country Code: VE
Registrant Phone Number: +58.2125771044
Registrant Email:
Administrative Contact ID: DI_8046068
Administrative Contact Name: Julio Antonio Ramirez
Administrative Contact Organization: NA
Administrative Contact Address1: Rivadavia 18
Administrative Contact City: Caracas
Administrative Contact State/Province: Distrito Capital
Administrative Contact Postal Code: 1054
Administrative Contact Country: Venezuela
Administrative Contact Country Code: VE
Administrative Contact Phone Number: +58.2125771044
Administrative Contact Email:
Billing Contact ID: DI_8046068
Billing Contact Name: Julio Antonio Ramirez
Billing Contact Organization: NA
Billing Contact Address1: Rivadavia 18
Billing Contact City: Caracas
Billing Contact State/Province: Distrito Capital
Billing Contact Postal Code: 1054
Billing Contact Country: Venezuela
Billing Contact Country Code: VE
Billing Contact Phone Number: +58.2125771044
Billing Contact Email:
Technical Contact ID: DI_8046068
Technical Contact Name: Julio Antonio Ramirez
Technical Contact Organization: NA
Technical Contact Address1: Rivadavia 18
Technical Contact City: Caracas
Technical Contact State/Province: Distrito Capital
Technical Contact Postal Code: 1054
Technical Contact Country: Venezuela
Technical Contact Country Code: VE
Technical Contact Phone Number: +58.2125771044
Technical Contact Email:
Name Server: NS1.ANTISPYWARE-REVIEW.BIZ
Name Server: NS2.ANTISPYWARE-REVIEW.BIZ
Created by Registrar: ESTDOMAINS INC
Last Updated by Registrar: ESTDOMAINS INC
Domain Registration Date: Sat Apr 19 17:24:45 GMT 2008
Domain Expiration Date: Sat Apr 18 23:59:59 GMT 2009
Domain Last Updated Date: Thu Jun 19 02:21:09 GMT 2008

Secureclick1.com

Secureclick1.com is the latest browser hijacker that simulates malware detection process and displays fake security warnings to try to scare you into buying Antivirus 2009 rogue anti-spyware. To safely detect and remvoe Secureclick1.com browser hijacker, download Spyware Doctor for free.

Secureclick1.com snapshot:


Secureclick1.com technical details:
Registrant:
Goroshko Igor +7.9218838839
Goroshko Igor
27 4 Akad. Pavlova
Moscow,MSK,RU 10422
Domain Name:secureclick1.com
Record last updated at 2008-09-17 06:21:12
Record created on 2008/9/17
Record expired on 2009/9/17
Domain servers in listed order:
ns1.freefastdns.com ns2.freefastdns.com
Administrator:
Name-- Goroshko Igor
EMail-: ()
tel --: +7.9218838839
org: Goroshko Igor
27 4 Akad. Pavlova
Moscow,MSK,RU 10422
Technical Contactor:
Name-- Goroshko Igor
EMail-: ()
tel --: +7.9218838839
org: Goroshko Igor
27 4 Akad. Pavlova
Moscow,MSK,RU 10422
Billing Contactor:
Name-- Goroshko Igor
EMail-: ()
tel --: +7.9218838839
org: Goroshko Igor
27 4 Akad. Pavlova
Moscow,MSK,RU 10422
Registration Service Provider:
name: Goroshko Igor
tel: +7.9218838839
fax: +7.9218838839
web:

Wednesday, September 17, 2008

Top-online-antivirus-xp.com

Top-online-antivirus-xp.com is a misleading hijacker that will try to scare users by showing fake scans that detects adult content on your computer and traces from xxx websites. Top-online-antivirus-xp.com will try to force you to download and buy fake malware\privacy cleaner. Download Spyware Doctor + antivirus premium software to detect for free and remove Top-online-antivirus-xp.com hijacker.

Top-online-antivirus-xp.com screenshot:



Top-online-antivirus-xp.com technical details:
Registrant:
Indiana Peterson +4.8126742589
Indiana Peterson
Sweet street 48
swiss,swiss,SWAZILAND 844523
Domain Name:top-online-antivirus-xp.com
Record last updated at 2008-09-15 10:37:58
Record created on 2008/9/15
Record expired on 2009/9/15
Domain servers in listed order:
ns1.top-online-antivirus-xp.com
ns2.top-online-antivirus-xp.com

Administrator:
Name-- Indiana Peterson
EMail-: ()
tel --: +4.8126742589
org: Indiana Peterson
Sweet street 48
swiss,swiss,SWAZILAND 844523
Technical Contactor:
Name-- Indiana Peterson
EMail-: ()
tel --: +4.8126742589
org: Indiana Peterson
Sweet street 48
swiss,swiss,SWAZILAND 844523
Billing Contactor:
Name-- Indiana Peterson
EMail-: ()
tel --: +4.8126742589
org: Indiana Peterson
Sweet street 48
swiss,swiss,SWAZILAND 844523
Registration Service Provider:
name: HostHost.Biz
tel: +7.4959685374
fax: +7.4959685374
web:http://hosthost.biza

Tuesday, September 16, 2008

Googlescanners-360.com

Googlescanners-360.com is a misleading malware scannner that use trojan horses to install itself on your computer and hijack browser homepage. Googlescanners-360.com simulates malware detections and display fake security warnings to trick you into buying rogue anti-spyware programs. Detect and remove http://Googlescanners-360.com hijacker using SpywareDoctor + antivirus.

Googlescanners-360.com snapshots:


Monday, September 15, 2008

Xp-antivirus-free-check.com

Xp-antivirus-free-check.com is a bogus web-site that looks like similiar to Windows Explorer. It simulates malware\spyware scan and displays exaggerated security reports to trick you into downloading an purchasing rogue anti-spyware software from Russia. We recomend to use Spyware Doctor + antivirus to remove Xp-antivirus-free-check.com hijacker from your computer.

Xp-antivirus-free-check.com snapshot:


Xp-antivirus-free-check.com technical details:
Registration Service Provided By: HIGH QUALITY HOST COMPANY
Contact: +1.6462130098
Domain Name: XP-ANTIVIRUS-FREE-CHECK.COM
Registrant:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 10-Sep-2008
Expiration Date: 10-Sep-2009
Domain servers in listed order:
ns-alt.starnet.md
ns.starnet.md
Administrative Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Status:ACTIVE

Sunday, September 14, 2008

Online-Security-Systems.com

Online-Security-Systems.com is a new misleading web-site that promoted Antivirus XP 2008 fake security software. Online-Security-Systems.com may hijack your homepage using trojan horses (usually Zlob.Trojan). We recomend ro remove Online-Security-Systems.com hijacker using SpywareDoctor + antivirus.

Online-Security-Systems.com snapshot:




Thursday, September 11, 2008

Scan.antispyware-free-scanner.com

Scan.antispyware-free-scanner.com is the latest misleading web-site (hijacker) that promotes new rogue anti-spyware products. Scan.antispyware-free-scanner com acts like online malware scanner, but in fact this site is 100% scamware.

Scan.antispyware-free-scanner.com screenshot:


Scan.antispyware-free-scanner.com tecnical details:
Domain name: antispyware-free-scanner.com
Name servers:
ns1.nameself.com
ns2.nameself.com
Registrar: RegTime.net Limited
Creation date: 2008-09-06
Expiration date: 2009-09-06
Registrant:
Dwight Feig
Email:
Organization: Dwight Feig
Address: Monticello St.
City: PORTLAND
State:
ZIP: 97201
Country: US
Phone: +1.5034380302
Fax:
Administrative Contact:
Dwight Feig
Email:
Organization: Dwight Feig
Address: Monticello St.
City: PORTLAND
State:
ZIP: 97201
Country: US
Phone: +1.5034380302
Fax:
Technical Contact:
Dwight Feig
Email:
Organization: Dwight Feig
Address: Monticello St.
City: PORTLAND
State:
ZIP: 97201
Country: US
Phone: +1.5034380302
Fax:
Billing Contact:
Dwight Feig
Email:
Organization: Dwight Feig
Address: Monticello St.
City: PORTLAND
State:
ZIP: 97201
Country: US
Phone: +1.5034380302
Fax:

Wednesday, September 10, 2008

Homepagetoday.com

Homepagetoday.com/xp and Homepagetoday.com/vista are new browser hijackers from Zlob.trojan family. They generate fake Myzor@fk.yf detection reports. and security warnings to lure you into downloading and purchasing fake spyware removers (rogue anti-spyware). Homepagetoday.com may slow your computer and cause system errors.

Homepagetoday.com snapshot:


Homepagetoday.com technical details:
Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com
Domain Name: HOMEPAGETODAY.COM
Registrant:
HPTP
Timofei Pirogov
ul Krasnoflotcev 21
Ekaterinburg
null,620017
RU
Tel. +7.3433340472
Creation Date: 04-Sep-2008
Expiration Date: 04-Sep-2009
Domain servers in listed order:
ns2.homepagetoday.com
ns1.homepagetoday.com
Administrative Contact:
HPTP
Timofei Pirogov
ul Krasnoflotcev 21
Ekaterinburg
null,620017
RU
Tel. +7.3433340472
Technical Contact:
HPTP
Timofei Pirogov
ul Krasnoflotcev 21
Ekaterinburg
null,620017
RU
Tel. +7.3433340472
Billing Contact:
HPTP
Timofei Pirogov
ul Krasnoflotcev 21
Ekaterinburg
null,620017
RU
Tel. +7.3433340472
Status:ACTIVE

Win-xp-antivir-hqscanner.com

Win-xp-antivir-hqscanner.com is the latest browser hijacker that promote rogue anti-spyware products. It may slow your computer and cause system errors. We strongly recomend to remove Win-xp-antivir-hqscanner.com using automatical removal tool.

Win-xp-antivir-hqscanner.com snapshot:



Win-xp-antivir-hqscanner.com technical details:

Registration Service Provided By: HLDPAYS
Contact: +1.3072206155
Domain Name: WIN-XP-ANTIVIR-HQSCANNER.COM
Registrant:
Protect Details, Inc
Domain Manager
29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Creation Date: 01-Sep-2008
Expiration Date: 01-Sep-2009
Domain servers in listed order:
ns2.win-xp-antivir-hqscanner.com
ns1.win-xp-antivir-hqscanner.com
Administrative Contact:
Protect Details, Inc
Domain Manager
29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Technical Contact:
Protect Details, Inc
Domain Manager
29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Billing Contact:
Protect Details, Inc
Domain Manager
29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Status:ACTIVE