New Batch of Rogue Security Applications

New Batch of Rogue Security Applications

Winfixer Group has already started their dirty work this year. The scammers might be very busy creating new Scam sites to distribute clones of avsystemcare/Winfixer (A well documented Rogue security application)

Filterprogram.com is one of the several websites that the scammers have created.

Screenshot of filterprogram.com website

Fake scanner page of filterprogram.com website:

Filterprogram.com uses the IP 72.52.225.11 which is also shared by 28 other clones websites.

The list of sites that shares the IP 72.52.225.11 are:

1. Alfaantivirus.com
2. Antivirusalmassimo.com
3. Barrevirus.com
4. Computervagt.com
5. Digitalerschutz.com
6. Elmejorcuidado.com
7. Ferramentantivirus.com
8. Filterprogram.com
9. Filtredevirus.com
10. Geeninfectie.com
11. Harddrivefilter.com
12. Keineinfektionen.com
13. Longueviepc.com
14. Maseg.net
15. Nonstopantivirus.com
16. Pcantivirenloesung.com
17. Pcsystemschutz.com
18. Plutoantivirus.com
19. Psbeveiligingssysteem.com
20. Riendevirus.com
21. Securepcguard.com
22. Sekyuritikojo.com
23. Sistemadedefensa.com
24. Sumejorantivirus.com
25. Totaltrygghet.com
26. Viruscontrolleuer.com
27. Viruswacht.com
28. Votremeilleurantivirus.com
29. Zeusantivirus.com

I scanned the setup file from filterprogram.com.

Virustotal Scan Result: 1/32 (3.13%)
Microsoft 1.3109 2008.01.03 Program:Win32/WinFixer

As you can see the detections are really poor. Stay away from all these sites.

Bharath MN