Saturday, August 9, 2008

Antispyware 2008 XP

Antispyware 2008 XP

Antispyware 2008 XP is a rogue security application. Antispyware 2008 XP is a clone of WinSpywareProtect/ Antivirus 2008 XP rogue security application

Site Name: Antispyware2008scanner.com
IP Address: 85.255.119.149

Screenshot of Scare/Fake scanner pages used by Antispyware 2008 XP


Screenshot of Antispyware 2008 XP application


The scanner pages uses the following site to push Antispyware 2008 XP installers:

Site Name: AS2008dl.com
IP Address: 85.255.118.69

Reference links: dwl.as2008dl. com/load/setup_100542_4_.exe

Which furthers downloads the application from the following site

Site Name: Getas2008xp.com
IP Address: 85.255.119.132

Reference links: dl.getas2008xp. com/get/?type=scanner&pin=100542&lnd=4

Further there are many other sites that is used by this family of rogue security application. Below is a list of sites that belongs to this family.


IP Address Site Name

85.255.118.226 Wspldrept.com
85.255.118.226 Wspexrept.com
85.255.119.154 Wspreprt.com
85.255.119.26 Winspywareprotection.com
64.28.185.138 Winspywareprotect2008.com

85.255.119.30 Av2008sales.com
85.255.119.158 Avcntxp.com
85.255.119.158 Avcntxp.com
85.255.119.150 Av2008check.com

85.255.119.156 As2008rep.com
85.255.119.29 Antispywaresales.com
85.255.118.228 Woeiruweoriu.com
85.255.118.227 Idreptavxp.com

Stay away from all these sites.

Bharath M N

blog comments powered by Disqus