🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: microsoft.public.security
Article #25

Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?

#25
From: Fix it
Date: Sat, 03 Jan 2009 22:43
35 lines
3288 bytes
"Fix it" <invalid@nothing.dil> wrote in message 
news:ifKdnS7d356sdcLUnZ2dnUVZ8i-dnZ2d@bt.com...
>
> "Doc" <docsavage20@yahoo.com> wrote in message 
> news:9757ee95-c1d6-472b-b86f-
>
> OK, anyone still got the link that the above thicko posted,
> and if you have uptodate firewall, and use FF,
> I tried it for the last time at 2209pm (UK) and got this:
>
> Karspersky security alerted that URL redirects to Phishing site
> ip identified as http://78.110.175.21/cp/?N
> Security suite logged that site attempted 2 network attacks
> and in the few of minutes with FF blocking but still listing the candoli's
> site, the redirect phishing site - Karpersky alerting that the site 
> attempted
> a staggering 1251 scans!
>
> Then I typed that IP address into google, here is the result and it's
> notoriety:
> http://www.google.co.uk/search?source=ig&hl=en&rlz=1G1GGLQ_ENUK288&q=http%3A%2F%2F78.110.175.21%2Fcp%2F%3FN&btnG=Google+Search&meta=lr%3D
>
> Anyone who clicked on the link in the original post to this thread
> and you didn't get an alert, you need to update your security software.
> Type into google "free online anti-virus scan"
> or go to Trend Micro's site or Karspersky's, and click the free scan 
> option.
> Good luck, also I suggest as many as possible post a complaint to
> google about the link being x-posted to so many groups by "Doc".
>
>

More happy reading, it really is quite vicious what it can do!
http://seattlepi.nwsource.com/forum/boards/viewtopic.asp?topicid=130710 
Technical Details
Message-ID: <fOmdnSQbfM23d8LUnZ2dnUVZ8sbinZ2d@bt.com>
Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail
References: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> <gjof84$d01$1@news.motzarella.org> <5ead3fa6-f549-4c31-83ff-7f96681daafd@f13g2000yqj.googlegroups.com> <83d7c6f7-d0c1-41c5-a963-536d6ed033db@z6g2000pre.googlegroups.com> <VtednVOwcfiBW8LUnZ2dnUVZ8tXinZ2d@bt.com> <9757ee95-c1d6-472b-b86f-af461f331e09@s37g2000vbp.googlegroups.com> <ifKdnS7d356sdcLUnZ2dnUVZ8i-dnZ2d@bt.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail
NNTP-Posting-Date: Sat, 03 Jan 2009 16:43:54 -0600
Reply-To: "Fix it" <invalid@tnothing.dil>
From: "Fix it" <invalid@nothing.dil>
Newsgroups: microsoft.public.security,alt.windows-xp,24hoursupport.helpdesk,alt.comp.virus
References: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> <gjof84$d01$1@news.motzarella.org> <5ead3fa6-f549-4c31-83ff-7f96681daafd@f13g2000yqj.googlegroups.com> <83d7c6f7-d0c1-41c5-a963-536d6ed033db@z6g2000pre.googlegroups.com> <VtednVOwcfiBW8LUnZ2dnUVZ8tXinZ2d@bt.com> <9757ee95-c1d6-472b-b86f-af461f331e09@s37g2000vbp.googlegroups.com> <ifKdnS7d356sdcLUnZ2dnUVZ8i-dnZ2d@bt.com>
Subject: Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?
Date: Sat, 3 Jan 2009 22:43:51 -0000
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-RFC2646: Format=Flowed; Response
Message-ID: <fOmdnSQbfM23d8LUnZ2dnUVZ8sbinZ2d@bt.com>
Lines: 37
X-Usenet-Provider: http://www.giganews.com
X-AuthenticatedUsername: NoAuthUser
X-Trace: sv3-a7tjJrK8HFtVxhF83N/1wdIdcMam3UI1C56XgNb85L/hTgDcoo2vi9t7LR3bXh7Xr5LTYrgDGARWeML!fG2AJOPly1Rgt4X9lUuDeV3ME21pNqaISCNNPCzAA6cAcNgHPM8/DqM86e0MET7X9dgySyZhZ/qo
X-Complaints-To: abuse@btinternet.com
X-DMCA-Complaints-To: abuse@btinternet.com
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.39