Rogue site using AVG good name.

Post Reply
logicman
Posts: 378
Joined: Sat Jun 28, 2008 12:58 am

Rogue site using AVG good name.

Post by logicman » Thu Aug 28, 2008 10:40 pm

AVG-Download-Free.net is a ROGUE site!

At the genuine grisoft AVG download sites, you just download AVG free,
but this site will redirect you to hxxps://secure.signupsecurity.com -
another known rogue site.

In recent Yahoo answers, people have been directed to this rogue:
http://answers.yahoo.com/question/index?qid=20080817111305AAwvpax

http://answers.yahoo.com/question/index?qid=20080814094451AApmkuW

I am unable to report these answers, since Yahoo has blocked my account.
It's not just me, other malware-fighters are being hit by Yahoo trolls also:
http://answers.yahoo.com/question/index;_ylt=AhyInKrmNjhmfxvOJY1idgJ27hR.;_ylv=3?qid=20080828090630AAkQLFC

Posting on this forum is my way of letting as many people as possible know
that AVG-Download-Free.net is a ROGUE site!

Stay safe!

:-)

Security_Wiz
Posts: 92
Joined: Sat Jun 28, 2008 7:46 pm

AVG

Post by Security_Wiz » Fri Aug 29, 2008 12:22 am

Thanks!

Also, is avg.com a rogue website?

The real website is grisoft.com, right?

On Wikipedia, they link to avg.com.

logicman
Posts: 378
Joined: Sat Jun 28, 2008 12:58 am

The real site.

Post by logicman » Fri Aug 29, 2008 2:05 am

grisoft.com is easy to remember and has links to the free download.
avg.com is ok and will redirect you to grisoft.com

The genuine URL >
http://www.grisoft.com/

There are other genuine sites, but also other typo-squatters -
watch out for any G-R-Y soft sites - some are really nasty.

In passing - I both use and recommend AVG8 free.
Despite its having been a bit slow and buggy lately, it has been of good service
in accurately identifying new trojan variants - which helps me warn others of attack sites.

Stay safe!

:-)

wmlyndall
Posts: 2
Joined: Fri Aug 29, 2008 2:10 am

Security ratings conflict

Post by wmlyndall » Fri Aug 29, 2008 2:10 am

I'm a novice in the security area. Maybe someone can shed light on how conflicting ratings arise. The site listed below is currently being blocked by Google. But WOT shows a green circle when you Google it. Is there a way to resolve this discrepancy, or is it just inevitable with so many sites and so many users? If a site is being blocked like this, is there a way to get unblocked if. as in this case, the owner is a legitimate plumbing business in Chicago.?
WL

Banner Plumbing - Wholesale Distributor of Plumbing Supplies

This site may harm your computer.
For over 52 years Banner Plumbing has been committed to the plumbing contractors in the entire Chicago area for providing plumbing supplies.
www.bannerplumbing.com/ - Similar pages - Note this

logicman
Posts: 378
Joined: Sat Jun 28, 2008 12:58 am

Re: bannerplumbing.

Post by logicman » Fri Aug 29, 2008 2:34 am

Hi, wmlyndall, and welcome.

I just caught your query before shutting my PC down.

Here is Google's report:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-GB&site=http://www.bannerplumbing.com/
As far as I know, only the site owner or admin can legally remove the file,
an issue currently under discussion in legal circles.

At this time, malware is being hacked onto multiple innocent sites.
Spammers then send out links such as "innocentsite dot com/watchmovie.exe"
The spammer's intent is to infect as many PCs as possible and make them part of a botnet.
The ultimate aim is to steal credit card and bank details.

http://en.wikipedia.org/wiki/Storm_botnet

Note to admin:
When this site shows as clean again, please delete my comment for bannerplumbing.

DarkRazorBeast
Posts: 2
Joined: Sun Aug 31, 2008 11:05 am

Thanks!

Post by DarkRazorBeast » Sun Aug 31, 2008 11:05 am

Hey, thanks for the warning.

phantazm
Posts: 4906
Joined: Thu Jan 03, 2008 1:46 pm

Alerting Yahoo

Post by phantazm » Sun Aug 31, 2008 12:24 pm

logicman: "I am unable to report these answers, since Yahoo has blocked my account. It's not just me, other malware-fighters are being hit by Yahoo trolls also..."

I'm not blocked, so I have passed your warnings and alerted yahoo.

logicman
Posts: 378
Joined: Sat Jun 28, 2008 12:58 am

Re: I have passed your warnings and alerted yahoo

Post by logicman » Sun Aug 31, 2008 4:40 pm

Thanks, phantazm.

I appreciate that! :-)

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests