10 replies to this topic

[Jammie]

Guys check this:
hxxp://winspycontrol.com/ - 100% rogue
hxxp://www.smartfixer.com/ - need test
Thank's

[nosirrah]

I will fire them up tonight .

Reverse IP in a sec .

[nosirrah]

Winspycontrol.com is on a AVSystemcare clone server . 112 total sites , most not in english . MBAM can remove the ones installed by or advertised through trojans .

The www.smartfixer.com server is mostly pr0n and pharna sites , 257 total . I will look into some of them tonight to see if any infect .

[Sparsha]

More information on smartfixer:
http://sunbeltblog.blogspot.com/2007/06/sm...ed-through.html

[Sparsha]

might be a few more junk scanners on this site

antivirusnew.blogspot.com

[nosirrah]

Smartfixer produced 84 ridiculous FPs for the sole purpose of scaring the user into purchasing their scam product .

The FPs were all temp internet files and random image files . These were all listed as critical threats .

The update option is also a scam . It declares that a new version can be downloaded but this new version has the same MD5 as the old .

Will be added to MBAM tonight .

[nosirrah]

Attempting to locate the installer for winspycontrol or the suffix that allows download .

It also seems that their server is under very high stress , pages open slowly and don't always generate complete graphics .

[nosirrah]

Old suffixes don't work , time to grab some new ones .

[nosirrah]

Current working suffix : data/index.php?06550859571002075652024367404b6e075a6b570757501356550a5e0c060b0b475307020d04173b
b045a020c070f004453090550

Now you are mine .

[Jammie]

thank's nosirrah, good work

[SwampDiner]

Added 155