Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

VirusRescue Looks Like New Rogue Program

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Anti-Spyware and Security Software Discussion
View previous topic :: View next topic  
Author Message
Nick
Site Admin


Joined: 27 Feb 2004
Last Visit: 20 Sep 2017
Posts: 3913
Location: California

PostPosted: Thu Aug 10, 2006 11:50 pm    Post subject: VirusRescue Looks Like New Rogue Program Reply with quote

Thanks to a spammer at this site, I found what appears to be a new SpywareQuake, SpyFalcon, and other scam antispyware programs clone. New program is called VirusRescue and fits the same pattern as the others.

I got the program from a link in a pop up after installing one of the media codecs that ended up installing SpywareQuake. So I ended up having two different spyware warnings in my system tray.

This one is from VirusRescue:



This one was also present, coming from SpywareQuake:




It appears the site VirusRescue.com hasn't been added to IE Spyad and other bad site lists yet.

More pictures and details at Security Ticker.
Back to top
View user's profile Send private message
Turtledove
SWW Graduate


Joined: 26 Dec 2005
Last Visit: 04 Feb 2011
Posts: 343
Location: California

PostPosted: Fri Aug 11, 2006 12:22 am    Post subject: Reply with quote

Thanks Smile I'll add it manually.
_________________
Graduate of Malware Removal University
WinPatrol, Online Armor,
AntiVir,
Smile...It WILL get better
Back to top
View user's profile Send private message
Moore
Moderator


Joined: 31 May 2004
Last Visit: 16 Jun 2014
Posts: 758
Location: .MooreLand.

PostPosted: Fri Aug 11, 2006 2:49 am    Post subject: Reply with quote

Good catch Nick Smile

No surprise it's from Inhoster / EST , we have their whole ' 85.255' range blocked , but interesting to see the guy it's registered to being in australia.

Quote:
virusrescue.com = [ 85.255.118.146 ]
Registration Service Provided By: ESTDOMAINS
Contact: 1.3027224217
Website: http://www.estdomains.com
Domain Name: VIRUSRESCUE.COM
Registrant:
VirusRescue Inc
Jeffry Murphy jeffry.murphy@gmail.com
Sherwood Road 8
Toowong
null Qld 4006
AU
Tel. 617.387615500
Creation Date: 16-Mar-2006
Expiration Date: 16-Mar-2007
Domain servers in listed order:
managedns1.esthost.com
managedns2.esthost.com
Administrative Contact:
VirusRescue Inc
Jeffry Murphy jeffry.murphy@gmail.com
Sherwood Road 8
Toowong
null Qld 4006
AU
Tel. 617.387615500
Technical Contact:
VirusRescue Inc
Jeffry Murphy jeffry.murphy@gmail.com

_________________
| Stop Malvertising | Outpost | Blocklist Pro | Hosts |
Back to top
View user's profile Send private message Visit poster's website
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 20 Feb 2018
Posts: 10420
Location: at the beach

PostPosted: Fri Aug 11, 2006 8:15 am    Post subject: Reply with quote

Quote:
but interesting to see the guy it's registered to being in australia.


It's probably totally fake info. Rolling Eyes
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Anti-Spyware and Security Software Discussion All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group