Could someone please tell me what is up with this website? when I go to it, it looks EXACTLY like the screen chrome displays when a website seems insecure or risky. It then quickly runs a very realistic looking scan that blends in completely with chrome, and then suggests downloading a “InstallSystemDefender”. Normally, I would think this would be enough to tell me this site is malicious, but just because I was curious, I downloaded the InstallSystemDefender_557.exe so I could scan it with avast and see what comes up. It comes up as clean. I have also done a search on Virustotal.com and several other malware/virus databases, submitting both the URL, and the file for inspection, but it comes out clean every time! As far as I’m concerned, this malicious file and URL are completely unknown to any antivirus program to date. I don’t want to open the file, but I’m curious what it is. Could someone please tell me of a good virus database or what this file actually is or does? Thanks.
Oh yeah, and I almost forgot to put the link here!! here it is—> hxxp://scan4.lgecelng.cz.cc/index.php?Q0HhTdT2bYRGmXppMx9FwiyHEyf4jzehoSvy+AdRpFLVCy8phMcpx1GWqyDgu1qwsKKkZSwfG5M1b5jkqMXCHURHZdHJx+1bKTsCKERK
We cant check the URL if you don
t post it
EDIT your post and brake the link so it is not clickable ( hxxp / http or wxw / www )
And yes that is absolutely a Fake scansite that download a Rogue
ok sorry…here it is: hxxp://scan4.lgecelng.cz.cc/index.php?Q0HhTdT2bYRGmXppMx9FwiyHEyf4jzehoSvy+AdRpFLVCy8phMcpx1GWqyDgu1qwsKKkZSwfG5M1b5jkqMXCHURHZdHJx+1bKTsCKERK
Oh yeah, and I guess I should mention that there are several sites that pop up on google image search that do this exact same thing, but with slight variations in the name of the file that is downloaded. I can submit others if anyone would like them. I don’t know how to submit this kind of stuff to avast directly, which is why I posted this thread…hope this helps.
It wont help posting it unclickable in a new post… ???
you have to go back in the first post EDIT it and break the link
Ok sorry, this is my first time posting on this forum. I fixed it
check your mail box…
Malwarebytes detect it as - Trojan.FakeAlert
sample sendt avast!
Got it. Thanks!