Zlob sites update

Zlob sites update

Zlob Trojan Distributing site:
Site Name: Wmvcompressor.com
IP Address: 77.91.231.201

Site Name: Mpegsystem.com
IP Address: 85.255.120.108

Scam Internet Security Page:
Site Name: Safebrowsenow.com
IP Address: 85.255.116.214

404Errorpage Scam:
Site Name: Dnsfails.com
IP Address: 85.255.118.242

Security Guide Scam Page:
Site Name: Securefreelinks.com
IP Address: 85.255.118.36

Reference pages:
www.Securefreelinks(dot)com/soft/?c=05333
www.Securefreelinks(dot)com/test/?c=05434

This links redirects user to different Scare/fake scanner pages, The new scare scan site in the list is:

Scare/Fake scanner page:
Site Name: Virus-webscanner.com
IP Address: 89.149.197.240

Ad-Server-Gate Pages:
Site Name: Gatefb.com
IP Address: 85.255.118.35

Site Name: Gatedv.com
IP Address: 85.255.118.38

Site Name: Gatefr.com
IP Address: 85.255.118.212

Site Name: Gateht.com
IP Address: 85.255.118.211

Reference links:
Gatefb(dot)com/gatevc.php?pn=srch0p1total7s2&c=841041
Gateht(dot)com/gatevc.php?pn=srch0p1total7s2&c=841041
Gatedv(dot)com/gatevc.php?id=icn02
Gatefr(dot)com/gatevc.php?id=icn02

The Ad-Server-Gate pages redirects to fake Security center site Howtoprotectpc.com which promotes Rogue security applications.

Site Name: Howtoprotectpc.com
IP Address: 85.255.118.211

howtoprotectpc(dot)com/v6/01-sad42k/

Other component sites

Site Name: Gateforietool.com
IP Address: 16.255.179.243

www.gateforietool(dot)com/redirect.php-> redirects to scan.wspscanner.com, which is a fake/scare scan page used to push WinSpywareProtect rogue security application.

All the above mentioned sites advertise/push well documented Rogue security applications. Stay away from these sites.

Bharath M N