keyword stuffing and browser hijack

CastleCops -> Web Malware Links

Author: logicman_alfLocation: UK PostPosted: Sun Jun 29, 2008 7:10 am    Post subject: keyword stuffing and browser hijack

Google search result found.

Top listed:
hxxp://homezillblog.com/car/?page_id=4331
redirect page, also tried
hxxp://homezillblog.com/car/
same redirect, to:
hxxp://topvirusscan.com/1/?xx=1&in=2&h=1&ag=2&end=1&g=1&affid=378&q=low+fixed+interest

topvirusscan dot com
launches browser shutdown
suggest computer is infected
offers a 'solution'
persistent algorithm - all clicks = 'yes please'
falsely reports infections.

This was run in a clean, new sandbox.

Author: tetak PostPosted: Sun Jun 29, 2008 10:31 pm    Post subject:

I've added the file it downloads to the malware listserv.

CastleCops Link/p1102006-MD5_da904288ef593a868cfefc8a3e7b733d_AntvrsInstall_exe.html



CastleCops -> Web Malware Links

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group