Tuesday, 15 November 2011

System Fix

According to S!Ri (and thanks for the sample)
System Fix is a fake Defragmenter tool (rogue) from the same family as: System Restore, Data Restore, Data Recovery, Master Utilities, HDD Repair, System Repair, Windows XP Recovery, Windows Fix Disk, Windows Restore, Windows Repair, Windows Recovery, Windows Diagnostic, Windows Tool, WinScan, Disk Recovery, WinDisk, Windows Disk, Windows Scan, Memory Optimizer, Disk Optimizer, Good Memory, Fast Disk, Disk OK, My Disk, Memory Fixer, HDD Fix, HDD Low, Scanner, Disk Repair, Defragmenter, HDD Tools, Smart HDD, HDD Rescue, HDD Plus, HDDDiagnostic, Hard Drive Diagnostic, HDD Scan, Win Defragmenter, Win Defrag, Win HDD, Check Disk, Ultra Defragger, Quick Defragmenter, HDD Defragmenter, System Defragmenter


To register (and help removal), copy paste this code: 1203978628012489708290478989147
 If your PC is infected with System Fix follow bleepingcomputer's removal guide.


The following urls was identified:
http://wiki-722866.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsaiTvvq1aG3F/2q5oNowaH1WY=
http://leriverolfunt.com/up.php?0Q9oBPXWIF6ZDA8mH5Z+B1dJ3GOt5RbXhB247slCrknCijOH2Xr3T8jzCzQSupnV+MLLQYxn7xtAKGkjlPDWiEa3HBeIa2zlQTCZYmcOBul+G8jZpxTa5n4o1OVN3bFNoprYcHtcDRcVi63XA9oZTRL/fzJUhqAaPFPFXFXgP/s=
http://debcapluesub.com/up.php?0Q9oBPXWIF6ZDA8mH5Z+B1dJ3GOt5RbXhB247slCrknCijOH2Xr3T8jzCzQSupnV+MLLQYxn7xtAKGkjlPDWiEa3HBeIa2zlQTCZYmcOBul+G8jZpxTa5n4o1OVN3bFNoprYcHtcDRcVi63XA9oZTRL/fzJUhqAaPFPFXFXgP/s=
http://wiki-722866.com/britix/a
http://wiki-722866.com/cgi-bin/
http://wiki-722866.com/icons/
http://wiki-722866.com/customers/
http://wiki-722866.com/cat/
http://wiki-722866.com/usage/
http://wiki-722866.com/error/
http://leriverolfunt.com/new
http://leriverolfunt.com/customers/
http://leriverolfunt.com/test/
http://leriverolfunt.com/xp/
http://leriverolfunt.com/binaries/
http://leriverolfunt.com/test1/
http://debcapluesub.com/images/
http://debcapluesub.com/index/
http://debcapluesub.com/new/
http://debcapluesub.com/img/
http://debcapluesub.com/default/
http://debcapluesub.com/faq/
http://debcapluesub.com/icons/
http://debcapluesub.com/0/
http://debcapluesub.com/library/
http://debcapluesub.com/scripts/
http://debcapluesub.com/n/
http://debcapluesub.com/css/
http://debcapluesub.com/customers/
http://debcapluesub.com/application/
http://debcapluesub.com/styles/
http://debcapluesub.com/tickets/
http://debcapluesub.com/auth/
http://debcapluesub.com/sale/
http://debcapluesub.com/tmp/
http://debcapluesub.com/var/

No comments:

Post a comment