Thursday, July 15, 2010

PornTube 2.0 leads Trojan traps

Beware of the fake porn tube that lead malware, don't ever try to install any patch from unidentified source. Below is one of the example that able to catch.



IP Address: 88.80.4.19

buy-is2010.com
for-sunny-se.com
for-sunny-smile.com
host-88-80-4-19.cust.prq.se
mail.buy-is2010.com
mail.buy-security-essentials.com
mail.for-sunny-se.com
mail.mamapapalol.com
mail.mega-scan-pc-new14.com
mail.mega-scan-pc-new14.net
mail.megahosting10.com
mail.red-xxx-tube.net
mail.sunny-money1.com
mail.vivainstalls.net
mamapapalol.com
mega-scan-pc-new14.net
megahosting10.com
red-xxx-tube.net
vivainstalls.net
winter-smile.com

Other inactive malware links:
hard-xxx-tube.com
xxx-white-tube.org

Malware named "SetupFlashPlayerPatch.exe" already detected by major AV according to VT (40/42).

0 comments: