AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=1903
Last Updated: 2006-12-01 21:31:39 UTC by Johannes Ullrich (Version: 1)
"…Site called "404dnserror/dot/com" (DO NOT VISIT)… User was infected with some spyware/adware. It kept redirecting them to the '404dnserror' page. The page looks like a generic server error, but also advertises an anti-spyware tool (System Doctor*) in the form of an ActiveX like installer toolbar at the top of the page. To save you the risk of exposing yourself to the site, I included a screen shot… Its probably safe to block/montor access to this domain."
(Screenshot available at the URL above.)
* Ref.: http://www.safer-networking.org/en/updatehistory/index.html
Updates - 10. November 2006
"…Malware …+ Systemdoctor…"
- http://www.symantec.com/security_response/…-062015-2622-99
"…SystemDoctor is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats…"
> http://www.avertlabs.com/research/blog/?p=147
December 6, 2006
- http://isc.sans.org/diary.php?storyid=1903
Last Updated: 2006-12-01 21:31:39 UTC by Johannes Ullrich (Version: 1)
"…Site called "404dnserror/dot/com" (DO NOT VISIT)… User was infected with some spyware/adware. It kept redirecting them to the '404dnserror' page. The page looks like a generic server error, but also advertises an anti-spyware tool (System Doctor*) in the form of an ActiveX like installer toolbar at the top of the page. To save you the risk of exposing yourself to the site, I included a screen shot… Its probably safe to block/montor access to this domain."
(Screenshot available at the URL above.)
* Ref.: http://www.safer-networking.org/en/updatehistory/index.html
Updates - 10. November 2006
"…Malware …+ Systemdoctor…"
- http://www.symantec.com/security_response/…-062015-2622-99
"…SystemDoctor is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats…"
> http://www.avertlabs.com/research/blog/?p=147
December 6, 2006