Sunbelt blog has uncovered a few new sites pushing rogue anti-spyware tools, such as SpyAxe and Winfixer, both known around the security forums and listed on Rogue \Suspect Anti-Spyware list among many others.

Read links below for details:

It's a security scam party, and this is one party you don't want to crash

Patrick and Adam found a bunch more of these “security scam” sites.

IPs below, feel free to put these in your block lists.

Newly found sites

Mattie Muirhead
Florence, AL US
wm @ needupdate[dot]com
[removed] dns404[dot]net
[removed] needupdate[dot]com
[removed] yoursystemupdate[dot]com
[removed] systemwarning[dot]com

Mag Dicacik
Praha, CZ
mag @ sexpicporn[dot]com
[removed] securitywarnings[dot]net

Sites already known

Henn Preson
Stockholm, SE
henn @ teeeen[dot]com

[removed] Warningmessage[dot]com
[removed] syserrors[dot]com

Mag Dicacik
Praha, CZ
mag @ sexpicporn[dot]com

[removed] notfound404[dot]com
[removed] Updateyoursystem[dot]com
[removed] securityerrors[dot]com
[removed] hdnsservidce[dot]com
[removed] downldboost[dot]com


Full Read @ Sunbelt Blog

============================================
Wondering how people get to these bogus security sites and download junk like SpyAxe?

Our spyware researchers have been investigating Vcodec.com. This is a site that has a program called “VCodec v3.05b is new generation multimedia compressor/decompressor which registers into the Windows collection of multimedia drivers…”

Full Read @ SunbeltBlog


============================================
And another:
SunbeltBlog