Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?

Article View: microsoft.public.security

Article #9

Back to microsoft.public.security Previous Next

From: Dustin Cook
Date: Sun, 04 Jan 2009 23:12

33 lines
2376 bytes

"Damian" <nospam@rabid-dog.net> wrote in
news:gjokq3$v70$1@news.tornevall.net: 

> Fix it wrote:
>> "Doc" <docsavage20@yahoo.com> wrote in message
>> news:6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com
>> ... 
>>> There's a website for a couple of famous jazz trumpeters, the late
>>> Candoli brothers.
>>>
>>> http://www.candoli.com
>>>
>>>
>>
>> I clicked that link and my Kaspersky security suite blocked the URL
>> with exactly the same warning it gives with the blockyell.com scam.
>> It seems a number of established security vendors have listed
>> the links you posted as very naughty in the same way as blockyell.
>> But thats why you posted them isn't it, you're spreading malware.
> 
> Any _good_ firewall/anti-virus/anti-malware app will block it. The
> OP's probably using some "Free" crap like AVG. 

free crap? Hah. So you think a paid version of norton or mcafee is better 
do you?


-- 
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org

Technical Details

Message-ID: <Xns9B89B999C1238HHI2948AJD832@69.16.185.250>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe24.iad.POSTED!7564ea0f!not-for-mail

References:

<6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> <R8adnYiOKP7TIMLUnZ2dnUVZ8qDinZ2d@bt.com> <gjokq3$v70$1@news.tornevall.net>

Show Full Headers

Complete Article Headers

X-Google-Thread: f9855,76f4f8cd2b965afc
X-Google-Thread: fe5ee,76f4f8cd2b965afc
X-Google-Thread: faa3c,76f4f8cd2b965afc
X-Google-Thread: fcd68,76f4f8cd2b965afc
X-Google-Attributes: gidf9855,gidfe5ee,gidfaa3c,gidfcd68,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe24.iad.POSTED!7564ea0f!not-for-mail
Newsgroups: microsoft.public.security,alt.windows-xp,24hoursupport.helpdesk,alt.comp.virus
Subject: Re: Why/how does Antivirus 2009 malware popup attach itself to certain links?
From: Dustin Cook <bughunter.dustin@gmail.com>
References: <6a82feef-8a3a-4042-bfd0-684ce1e56ad3@l39g2000yqn.googlegroups.com> <R8adnYiOKP7TIMLUnZ2dnUVZ8qDinZ2d@bt.com> <gjokq3$v70$1@news.tornevall.net>
Organization: Core Technologies
Message-ID: <Xns9B89B999C1238HHI2948AJD832@69.16.185.250>
User-Agent: Xnews/5.04.25
Lines: 34
NNTP-Posting-Host: bhaoblmlmjfihlommdgadocdaedkjbpb
X-Complaints-To: abuse@charter.net
X-Trace: jkohgggjelajdaokmcjobjcmnmlfmhhabpldjihaomjbcigfbhaoblmlmjfihlomagggihcigbfgjekmkimllccckliebfpdjgfppejbndblaekjllkjcackbpcbnmidbgjklipccefckbgb
NNTP-Posting-Date: Sun, 04 Jan 2009 23:12:29 UTC
Date: Sun, 04 Jan 2009 23:12:29 GMT

Reply to Parent Message