New scam sites

New scam sites

Here is the list of a few new sites used by the scammers to advertise and push well documented rogue applications.

Sites pushing VirusIsolator Rogue:

Site Name: Virus-isolator.com
Site Name: Virus-isolator.net
IP Address: 217.170.77.150

Also the following address is used to stealthy install VirusIsolator rogue:
hxxp://62.176.16.161/bingo/Installer.exe

Sites pushing SpywareIsolator Rogue

Site Name: Spywareiso2008.com
IP Address: 72.233.62.16

Site Name: Si-install.net
IP Address: 72.233.62.20

Sample:
hxxp://si-install.net/distrib/installer_abr.exe

Sites pushing VipAntiSpyware Rogue

Site Name: Vipantispy.com
Site Name: Vipantisetup.net
IP Address: 217.150.254.4

Sample:
hxxp://vipantisetup.net/distrib/installer.exe

Stay away from all these Rogue distributing sites.

Bharath M N