Sunday, November 22, 2009

Groundhogday2.cn, Power-security.cn, Bestofsecurity.cn

Groundhogday2.cn is another fake online scanner, now registered with Chinese domain (.cn). The website pushes fake antispyware of PersonalAntivirus. The initial address is automatically changed to Power-security.cn (Bestofsecurity.cn) to avoid recognizing the scam as Power-security.cn is a quite notorious malware distribution center.You need to remove groundhogday2.cn hijacker, where that is a malicious code that redirects you to http://groundhogday2.cn and then to http://power-security.cn. Click here to scan your computer system and perform groundhogday2.cn hijacker removal as necessary. Failure to get rid of groundhogday2.cn hijacker is a risk of adware of Personal Antivirus intrusion and permanent redirections of your web-surfing to Groundhogday2.cn.

Power-security.cn screenshot:



Hijackers removal tool:

Groundhogday2.cn, Power-security.cn, Bestofsecurity.cn technical details:

Domain Name: bestofsecurity.cn
ROID: 20091122s10001s89897050-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-22 23:38
Expiration Date: 2010-11-22 23:38
-------------
Domain Name: power-security.cn
ROID: 20091122s10001s89896815-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-22 23:38
Expiration Date: 2010-11-22 23:38
-------------
Domain Name: groundhogday2.cn
ROID: 20091117s10001s60642682-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-17 23:05
Expiration Date: 2010-11-17 23:05

Eco-AV.com

Eco-AV.com is a malicious web-site that can hijack your browser and force to download and purchase Eco Antivirus fake security software. We recommend to remove Eco-AV.com hijacker using Spyware Doctor.

Eco-AV.com screenshot:


Eco-AV.com removal tool:


Eco-AV.com technical details:
Registration Service Provided By: NameCheap.com
Contact:
Domain name: eco-av.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected ()
Fax:
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Status: Locked
Name Servers:
dns1.registrar-servers.com
dns2.registrar-servers.com
dns3.registrar-servers.com
Creation date: 04 Nov 2009 12:38:30
Expiration date: 04 Nov 2010 11:38:30

Friday, November 6, 2009

Bestwaytocheck2.com

Bestwaytocheck2.com is one of the links in the chain of marketing fake system security suites (Alpha Antivirus). Bestwaytocheck2.com front page is posed as a home-page of certain software. Hidden pages of Bestwaytocheck2.com, which cannot be reached from its home page, are fake online scanners. Users are redirected either to main page or hidden pages of Bestwaytocheck2.com by browser hijacker or open those pages being duped with online ads at third parties websites.
You need to remove Bestwaytocheck2.com hijacker to get rid of Bestwaytocheck2.com ads, where it is Bestwaytocheck2.com hijacker that redirects your browsing to Bestwaytocheck2.com. Otherwise, your browser will constantly redirect you to such websites as Bestwaytocheck2.com and may return you fake Google serch results.
Click here to establish whether you need to perform removal of Bestwaytocheck2.com hijacker and to remove it, if applicable (using Spyware Doctor).

Bestwaytocheck2.com technical details:
Registrant:
Name: Suin L Jake
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Administrative Contact:
Name: Suin L Jake
Organization: n/a
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Phone: +4.0776474524
Fax: +4.0776474524
Email:
Technical Contact:
Name: Suin L Jake
Organization: n/a
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Nameserver Information:
ns1.everydns.net
ns2.everydns.net
ns3.everydns.net
ns4.everydns.net
Create: 2009-11-05 18:55:18
Update: 2009-11-05
Expired: 2010-11-05
QueryTimes: 90