Article View: microsoft.public.security
Article #30Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?
From: 1PW
Date: Sat, 03 Jan 2009 17:55
Date: Sat, 03 Jan 2009 17:55
31 lines
2597 bytes
2597 bytes
On 01/03/2009 07:48 AM, Doc sent: > There's a website for a couple of famous jazz trumpeters, the late > Candoli brothers. > > http://www.candoli.com > > It's a legitimate site, these guys were icons. There's a photo in > their gallery of Pete playing wearing a Superman suit. I posted the > direct link to it in a trumpet forum. > > http://www.candoli.com/pic28.htm > > Several people reported that clicking the link brought up that > Antivirus 2009 malware bogus alert. I tried it and got the same > thing. > > How does that Antivirus 2009 page hijack attempts to go to other sites > like that? How does it get attached to certain ones? Their web server is infected. > > How is it these people haven't been shut down? Which people? The web page author or maintainer? The hosting company? The ISP? Most of these folks are indemnified and will still collect recurring fees. I don't wish to disrespect you or your query but this is what safe hex is about. -- 1PW @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]
Technical Details
Message-ID:
<gjo8q3$nko$1@news.motzarella.org>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!feeder.erje.net!news.motzarella.org!motzarella.org!news.motzarella.org!not-for-mailReferences:
<6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com>Show Full Headers
Complete Article Headers
X-Google-Thread: f9855,76f4f8cd2b965afc X-Google-Thread: fe5ee,76f4f8cd2b965afc X-Google-Thread: faa3c,76f4f8cd2b965afc X-Google-Thread: fcd68,76f4f8cd2b965afc X-Google-Attributes: gidf9855,gidfe5ee,gidfaa3c,gidfcd68,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!feeder.erje.net!news.motzarella.org!motzarella.org!news.motzarella.org!not-for-mail From: 1PW <barcrnahgjuvfgyr@nby.pbz> Newsgroups: microsoft.public.security,alt.windows-xp,24hoursupport.helpdesk,alt.comp.virus Subject: Re: Why/how does Antivirus 2009 malware popup attach itself to certain links? Date: Sat, 03 Jan 2009 09:55:03 -0800 Organization: Little or none Lines: 31 Message-ID: <gjo8q3$nko$1@news.motzarella.org> References: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Trace: news.eternal-september.org U2FsdGVkX19Vx2K648O44YxZAa9bFfT+AHIM6iU0v7L0C7rHYIXnQXfw4wu+IjALcgHQeA7VH8hgNU40rBTOMWPrwcDVMdwRvgpCkNOXuERSV1sZoXIPQm7003vejZKscVFkonNKh7k= X-Complaints-To: Please send complaints to abuse@motzarella.org with full headers NNTP-Posting-Date: Sat, 3 Jan 2009 17:55:15 +0000 (UTC) In-Reply-To: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> X-Auth-Sender: U2FsdGVkX19SYy3eRPRnhaIbTI5Cjb5X Cancel-Lock: sha1:jThIKqM1ptctOsGU4ikt8EZXiXM=