Wednesday, January 20, 2010

Softwaredefense.net

Softwaredefense.net is a typical Ghost Antivirus browser hijacker. This one is similiar to Softwarerising.net and many others. It uses trojan horse to infect your computer and generate popups and fake security scan results. We recommend to remove Softwaredefense.net using Spyware Doctor.


Softwaredefense.net screenshot:



Softwaredefense.net hijacker removal tool:

Softwaredefense.net technical details:

RSP: MyTop Ltd.
URL: http://mydomain-in.co.uk
owner-contact: P-SNG999
owner-fname: Stanislav
owner-lname: Gladishev
owner-street: pr Andropova 27‎ - 8
owner-city: Moskva
owner-zip: 115487
owner-country: RU
owner-phone: +7.4996156560
owner-email:
admin-contact: P-SNG999
admin-fname: Stanislav
admin-lname: Gladishev
admin-street: pr Andropova 27‎ - 8
admin-city: Moskva
admin-zip: 115487
admin-country: RU
admin-phone: +7.4996156560
admin-email:
tech-contact: P-HUM534
tech-organization: MT Management Group Limited
tech-fname: Host
tech-lname: Master
tech-street: Suite 4, 10 Great Russell street
tech-city: London
tech-zip: WC1B 3BQ
tech-country: GB
tech-phone: +44.2032390693
tech-fax: +44.2031633992
tech-email:
billing-contact: P-HUM534
billing-organization: MT Management Group Limited
billing-fname: Host
billing-lname: Master
billing-street: Suite 4, 10 Great Russell street
billing-city: London
billing-zip: WC1B 3BQ
billing-country: GB
billing-phone: +44.2032390693
billing-fax: +44.2031633992
billing-email:
nameserver: ns1.softwaredefense.net 66.197.205.133
nameserver: ns2.softwaredefense.net 66.197.205.133

Tuesday, January 19, 2010

Softwarerising.net

Among the websites used to market fake antispyware Softwarerising.net is one of the most actively promoted (during the recent period before the date of this post). The promotion is made in practically every possible way. In particular, there were dozens of comments, which looked more or less credible, in which users complained about misleading ads at quite fair websites which drawn them to Softwarerising.net (http://Softwarerising.net) then they were duped to download the related counterfeit so that they had started to look for the way to remove Softwarerising.net related counterfeit. You may also need to get rid of Softwarerising.net hijacker as it is another tool used to promote the tricky webpage and exploiting to that purpose your web-browser. Click here to start free scan and perform safe and fast removal of Softwarerising.net scam.


Softwarerising.net screenshot:



Softwarerising.net hijacker removal tool:

Softwarerising.net technical details:
RSP: MyTop Ltd.
URL: http://mydomain-in.co.uk
owner-contact: P-SNG999
owner-fname: Stanislav
owner-lname: Gladishev
owner-street: pr Andropova 27‎ - 8
owner-city: Moskva
owner-zip: 115487
owner-country: RU
owner-phone: +7.4996156560
owner-email:
admin-contact: P-SNG999
admin-fname: Stanislav
admin-lname: Gladishev
admin-street: pr Andropova 27‎ - 8
admin-city: Moskva
admin-zip: 115487
admin-country: RU
admin-phone: +7.4996156560
admin-email:
tech-contact: P-HUM534
tech-organization: MT Management Group Limited
tech-fname: Host
tech-lname: Master
tech-street: Suite 4, 10 Great Russell street
tech-city: London
tech-zip: WC1B 3BQ
tech-country: GB
tech-phone: +44.2032390693
tech-fax: +44.2031633992
tech-email:
billing-contact: P-HUM534
billing-organization: MT Management Group Limited
billing-fname: Host
billing-lname: Master
billing-street: Suite 4, 10 Great Russell street
billing-city: London
billing-zip: WC1B 3BQ
billing-country: GB
billing-phone: +44.2032390693
billing-fax: +44.2031633992
billing-email:
nameserver: ns1.softwarerising.net 66.197.205.133
nameserver: ns2.softwarerising.net 66.197.205.133

Sunday, November 22, 2009

Groundhogday2.cn, Power-security.cn, Bestofsecurity.cn

Groundhogday2.cn is another fake online scanner, now registered with Chinese domain (.cn). The website pushes fake antispyware of PersonalAntivirus. The initial address is automatically changed to Power-security.cn (Bestofsecurity.cn) to avoid recognizing the scam as Power-security.cn is a quite notorious malware distribution center.You need to remove groundhogday2.cn hijacker, where that is a malicious code that redirects you to http://groundhogday2.cn and then to http://power-security.cn. Click here to scan your computer system and perform groundhogday2.cn hijacker removal as necessary. Failure to get rid of groundhogday2.cn hijacker is a risk of adware of Personal Antivirus intrusion and permanent redirections of your web-surfing to Groundhogday2.cn.

Power-security.cn screenshot:



Hijackers removal tool:

Groundhogday2.cn, Power-security.cn, Bestofsecurity.cn technical details:

Domain Name: bestofsecurity.cn
ROID: 20091122s10001s89897050-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-22 23:38
Expiration Date: 2010-11-22 23:38
-------------
Domain Name: power-security.cn
ROID: 20091122s10001s89896815-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-22 23:38
Expiration Date: 2010-11-22 23:38
-------------
Domain Name: groundhogday2.cn
ROID: 20091117s10001s60642682-cn
Domain Status: clientTransferProhibited
Administrative Email:
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server:ns1.everydns.net
Name Server:ns2.everydns.net
Name Server:ns3.everydns.net
Name Server:ns4.everydns.net
Registration Date: 2009-11-17 23:05
Expiration Date: 2010-11-17 23:05

Eco-AV.com

Eco-AV.com is a malicious web-site that can hijack your browser and force to download and purchase Eco Antivirus fake security software. We recommend to remove Eco-AV.com hijacker using Spyware Doctor.

Eco-AV.com screenshot:


Eco-AV.com removal tool:


Eco-AV.com technical details:
Registration Service Provided By: NameCheap.com
Contact:
Domain name: eco-av.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected ()
Fax:
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Status: Locked
Name Servers:
dns1.registrar-servers.com
dns2.registrar-servers.com
dns3.registrar-servers.com
Creation date: 04 Nov 2009 12:38:30
Expiration date: 04 Nov 2010 11:38:30

Friday, November 6, 2009

Bestwaytocheck2.com

Bestwaytocheck2.com is one of the links in the chain of marketing fake system security suites (Alpha Antivirus). Bestwaytocheck2.com front page is posed as a home-page of certain software. Hidden pages of Bestwaytocheck2.com, which cannot be reached from its home page, are fake online scanners. Users are redirected either to main page or hidden pages of Bestwaytocheck2.com by browser hijacker or open those pages being duped with online ads at third parties websites.
You need to remove Bestwaytocheck2.com hijacker to get rid of Bestwaytocheck2.com ads, where it is Bestwaytocheck2.com hijacker that redirects your browsing to Bestwaytocheck2.com. Otherwise, your browser will constantly redirect you to such websites as Bestwaytocheck2.com and may return you fake Google serch results.
Click here to establish whether you need to perform removal of Bestwaytocheck2.com hijacker and to remove it, if applicable (using Spyware Doctor).

Bestwaytocheck2.com technical details:
Registrant:
Name: Suin L Jake
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Administrative Contact:
Name: Suin L Jake
Organization: n/a
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Phone: +4.0776474524
Fax: +4.0776474524
Email:
Technical Contact:
Name: Suin L Jake
Organization: n/a
Address: 76 Front Street
City: KNOTTING
Province/state: KNOTTING
Country: GB
Postal Code: 44231
Nameserver Information:
ns1.everydns.net
ns2.everydns.net
ns3.everydns.net
ns4.everydns.net
Create: 2009-11-05 18:55:18
Update: 2009-11-05
Expired: 2010-11-05
QueryTimes: 90

Sunday, October 4, 2009

Securedscantoolspc.com

Securedscantoolspc.com is a website devoted solely to fake system utility ads. There is a suspicion that hackers mastering it embed every now and then, for short periods in order to prevent their exposure, forbidden code into the website, so browser may be infected with special code. Such code may be classified as a browser hijacker. It blocks legit websites and takes a part of control over infected browser. You probably need to remove Securedscantoolspc.com hijacker even if you remember only a single visit to Securedscantoolspc.com.
Software promoted at Securedscantoolspc.com is adware. You will like to get rid of Securedscantoolspc.com related adware if you download it from that website. Click here to check your system for malware and viruses and perform infections from Securedscantoolspc.com removal, as applicable.

Securedscantoolspc.com technical details:
Registration Service Provided By: DOMAIN NAMES REGISTRAR REG.RU LTD.
Contact: +7.4955801111
Domain Name: SECUREDSCANTOOLSPC.COM
Registrant:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 02-Oct-2009
Expiration Date: 02-Oct-2010
Domain servers in listed order:
ns2.stabilityscantool.com
ns1.stabilityscantool.com
Administrative Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Scan.drealwebnamescan.com

Scan.drealwebnamescan.com is a dump of Internet. The website has been engaged in many schemes of making money out of nothing or rather out of exploiting user’s credulity. Currently (pls. see the post date) Scan.drealwebnamescan.com is known as a site for fake security suites ads. There is a hijacker and Internet popup linked with Scan.drealwebnamescan.com. If your browser suddenly has been redirected to Scan.drealwebnamescan.com, you may need to remove Scan.drealwebnamescan.com hijacker as such redirections will be repeated regularly otherwise. Whether it was just a popup at another website or it was the hijacker you may establish clicking here to run free scan and get rid of Scan.drealwebnamescan.com infections, as appropriate.

Scan.drealwebnamescan.com technical details:
Domain Name: DREALWEBNAMESCAN.COM
Registrant:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 04-Oct-2009
Expiration Date: 04-Oct-2010

Domain servers in listed order:
ns2.everydns.net
ns1.everydns.net
Administrative Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact:
PrivacyProtect.org
Domain Admin ()
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Status:ACTIVE

Monday, April 13, 2009

Securedvirusscanner.com

Securedvirusscanner.com is a typical hijacker that promote Personal Antivirus rogue anti-spyware. Securedvirusscanner.com will hijack your homepage and generate fake spyware detection reports and warnings to trick you into buying Personal Antivirus (useless scamware).
We recommend to remove Securedvirusscanner.com hijacker using automatical remover (Spyware Doctor).

Securedvirusscanner.com screenhsot:

Securedvirusscanner.com technical details:
Domain name: securedvirusscanner.com
Registrant Contact:
Privat person
Aleksandr Rozanov adsff@freebbmail.com
+74952783441 fax: +74952783441
ul. Peshkova 29-52
Moskva Moskovskay oblast 126106
ru
Administrative Contact:
Aleksandr Rozanov adsff@freebbmail.com
+74952783441 fax: +74952783441
ul. Peshkova 29-52
Moskva Moskovskay oblast 126106
ru
Technical Contact:
Aleksandr Rozanov adsff@freebbmail.com
+74952783441 fax: +74952783441
ul. Peshkova 29-52
Moskva Moskovskay oblast 126106
ru
Billing Contact:
Aleksandr Rozanov adsff@freebbmail.com
+74952783441 fax: +74952783441
ul. Peshkova 29-52
Moskva Moskovskay oblast 126106
ru
DNS:
ns1.greatwallsupport.com
ns2.greatwallsupport.com
ns3.greatwallsupport.com
Created: 2009-01-03
Expires: 2010-01-03

Tuesday, March 17, 2009

Antivirusprolivescanner.com

Antivirusprolivescanner.com is a new web-site that will hijack browser homepage and scare users by showing fake malware detection messages (alerts, warnings). Antivirusprolivescanner.com results from Zlob trojan. We recommend to remove both threats using Spyware Doctor. It will scan your PC for free and kill all parasites.

Antivirusprolivescanner.com screenshots:


Antivirusprolivescanner.com technical details:
Domain name: antivirusprolivescanner.com
Status: Active
Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )
Registrant:
Name: Vali B Geeta
Address: 164 Lake Gardens
City: 700045
Province/state: Kolkata
Country: IN
Postal Code: 700045
Administrative Contact:
Name: Vali B Geeta
Organization: n/a
Address: 164 Lake Gardens
City: 700045
Province/state: Kolkata
Country: IN
Postal Code: 700045
Phone: +9.13324226625
Fax: +9.13324226625
Email: masandgita@yahoo.com
Technical Contact:
Name: Vali B Geeta
Organization: n/a
Address: 164 Lake Gardens
City: 700045
Province/state: Kolkata
Country: IN
Postal Code: 700045
Nameserver Information:
ns1.basicstechnology.com
ns2.basicstechnology.com
ns3.basicstechnology.com
Create: 2009-03-11 19:46:08
Update: 2009-03-16
Expired: 2010-03-11
QueryTimes: 34

Spy-protec.com

Spy-protec.com is actively promoted through popups and ad banners at other suspicious websites. However, legitimate websites may also provide their ad resource to unverified contractors like those redirecting users to websites like hxxp://spy-protec.com that advertise malware of SpywareProtect. If you have ever visited hxxp://spy-protec.com, you may need to remove spy-protec.com hijacker which is also a frequent reason of web-surfing redirection to hxxp://spy-protec.com. Click here to launch free computer scan in order to reveal infections and get rid of spy-protec.com threat (using Spyware Doctor).

Spy-protec.com screnshot:

Spy-protec.com technical details:
Domain name: spy-protec.com
Name servers:
ns01.spy-protec.com
ns02.spy-protec.com
Registrar: Regtime Ltd.
Creation date: 2009-01-17
Expiration date: 2010-01-16
Registrant:
Geraldevich Viktus
Email:
Organization: Private person
Address: Varshavskaya nab., 12-45
City: Moskva
State: RU
ZIP: 419312
Country: RU
Phone: +7.9217748394
Fax: +7.9217748394
Administrative Contact:
Geraldevich Viktus
Email:
Organization: Private person
Address: Varshavskaya nab., 12-45
City: Moskva
State: RU
ZIP: 419312
Country: RU
Phone: +7.9217748394
Fax: +7.9217748394
Technical Contact:
Geraldevich Viktus
Email:
Organization: Private person
Address: Varshavskaya nab., 12-45
City: Moskva
State: RU
ZIP: 419312
Country: RU
Phone: +7.9217748394
Fax: +7.9217748394
Billing Contact:
Geraldevich Viktus
Email:
Organization: Private person
Address: Varshavskaya nab., 12-45
City: Moskva
State: RU
ZIP: 419312
Country: RU
Phone: +7.9217748394
Fax: +7.9217748394