Well, I was wondering when did I install NOD32 on my system? Then I remembered that I had seen that screenshot on S!Ri’ s blog here and recently seen on Paperghost’s blog here.
Further digging revealed that my system was free from infection and the popup that displayed was actually a webpage.
Screenshot of the popups used by the scammers
Well here’s the website detail;
Site Name: Entiremedianet.com
IP Address: 184.108.40.206
The site is involved in distributing well documented rogue security applications like Pc-Antispyware and Pc-Cleaner
Here is the list of other sites that is used in this scam.
Site Name: Antispyware-review.biz
Site Name: Antispyware-reviews.biz
IP Address: 220.127.116.11
Site Name: Pc-Antispyware.com
IP Address: 18.104.22.168
Site Name: Pc-Cleaner.com
IP Address: 22.214.171.124
Stay away from all these sites.
Bharath M N