Article View: microsoft.public.security
Article #8Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?
From: Dustin Cook
Date: Sun, 04 Jan 2009 23:11
Date: Sun, 04 Jan 2009 23:11
25 lines
1934 bytes
1934 bytes
Doc <docsavage20@yahoo.com> wrote in news:6a82feef-8a3a-4042-bfd0- 684ce1e56ad3@l39g2000yqn.googlegroups.com: > Several people reported that clicking the link brought up that > Antivirus 2009 malware bogus alert. I tried it and got the same > thing. The web server got infected... > How does that Antivirus 2009 page hijack attempts to go to other sites > like that? How does it get attached to certain ones? By infecting vulnerable servers and computers. > How is it these people haven't been shut down? Shut down? Who would you shut down exactly? -- Regards, Dustin Cook Malware Researcher MalwareBytes - http://www.malwarebytes.org
Technical Details
Message-ID:
<Xns9B89B9646BBF5HHI2948AJD832@69.16.185.250>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe24.iad.POSTED!7564ea0f!not-for-mailReferences:
<6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com>Show Full Headers
Complete Article Headers
X-Google-Thread: f9855,76f4f8cd2b965afc X-Google-Thread: fe5ee,76f4f8cd2b965afc X-Google-Thread: faa3c,76f4f8cd2b965afc X-Google-Thread: fcd68,76f4f8cd2b965afc X-Google-Attributes: gidf9855,gidfe5ee,gidfaa3c,gidfcd68,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe24.iad.POSTED!7564ea0f!not-for-mail Newsgroups: microsoft.public.security,alt.windows-xp,24hoursupport.helpdesk,alt.comp.virus Subject: Re: Why/how does Antivirus 2009 malware popup attach itself to certain links? From: Dustin Cook <bughunter.dustin@gmail.com> References: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> Organization: Core Technologies Message-ID: <Xns9B89B9646BBF5HHI2948AJD832@69.16.185.250> User-Agent: Xnews/5.04.25 Lines: 26 NNTP-Posting-Host: bhaoblmlmjfihlommdgadocdaedkjbpb X-Complaints-To: abuse@charter.net X-Trace: jkohgggjelajdaokmcjobjcmnmlfmhhabafobcfkhilkfkeabhaoblmlmjfihlomagggihcigbfgjekmkimllccckliebfpdjgfppejbndblaekjnknobicojpbnooinbgjklipccefckbgb NNTP-Posting-Date: Sun, 04 Jan 2009 23:11:15 UTC Date: Sun, 04 Jan 2009 23:11:15 GMT