Thursday 18 August 2011

FakeAV who target French people: Antivirus 2011

Antivirus 2011, is a new FakeAV, detected today by some honeypots.


Link all fake antivirus, it ask for unlock code and detects fake infections.
Using the service starpass for pay:

Even if you 'pay' this FakeAV it will continue to says serial incorrect
Your codes are just sent to the gate.


Super fake infections list:


The following URLs was identified:
http://92.241.165.153/a/gate.php?pc=XYLITOL-F12F085&code1=1337&code2=&code3=&code4=&code5=&code6=&code7=&code8


Admin panels:
http://92.241.165.153/a/
http://92.241.165.153/b/
http://92.241.165.153/c/
http://92.241.165.153/d/

Who look's like the exploit kit crimepack (this is not crimepack)


And a scam for Skyrock.com, saying your account will be removed after 24hours and your IP blocked on the Skyrock network if you don't pay by phone.


Edit 22h55: There is an activity right now on the server
The guys seem remove his files:

Interface now buggy:


server now clean:

Afraid ? :þ
If your PC is infected with Antivirus 2011 follow bleepingcomputer's removal guide.

Edit: thanks to MezmeriZe for your image, i must admit you made my day, hack the planet !

1 comment:

  1. Can't stop laughing!

    Congratulations dude, keep going on because dudes like you are very useful! :)

    ReplyDelete