Beware: Wolves in sheeps clothing found on different sites (security scams)
This is another “wolf in sheeps clothing” alert. The Sunbelt blog has information and tips on a number of other sites that are posing as either the Windows security center page, or a page not found error. The windows security center spoof once again claims the following “Attention! Your system is under control of remote computer with IP address >>>>>>> The remote computer has access to the following folders on your PC: \windows\system32 \program files\internet explorer \my documents drive C;\ files, click here to download official anti-spyware software. Your private info is collected by w32.sinnaka.a@mm”
The page not found spoof goes like this: “The page cannot be displayed: the pag eyou are looking for is currently unavailable. The web site might be experiencing technical difficulties or you may need to adjust your browser settings. Please try the following: Install Spy trooper software to clean your pc. If you typed the page address in the address bar….” the rest of the page seems to be the usual Microsoft IE page cannot be displayed template. The other note is that at the top of the page there is a windows information bar that says “The page you are looking for is blocked by the adware on your pc. Remove it with spy trooper software click here.”
From sunbelt here is a listing of the latest sites, and previously discovered sites as well:
Newly found sites
Mattie Muirhead
Florence, AL US
wm @ needupdate.com
85.255.115.174 dns404.net
85.255.115.130 needupdate.com
85.255.115.173 yoursystemupdate.com
85.255.115.172 systemwarning.comMag Dicacik
Praha, CZ
mag @ sexpicporn.com
85.255.115.172 securitywarnings.netSites already known
Henn Preson
Stockholm, SE
henn @ teeeen.com85.255.115.130 Warningmessage.com
85.255.115.131 syserrors.comMag Dicacik
Praha, CZ
mag @ sexpicporn.com85.255.115.131 notfound404.com
85.255.115.132 Updateyoursystem.com
85.255.115.170 securityerrors.com
85.255.115.179 hdnsservidce.com
85.255.115.180 downldboost.com
Network administrators may want to block IP addresses for these sites.