another rouge scanner

hxxp://www1.protectionforyouom.rr.nu/fl6d47p?f27d0jgld=ipyf1m3T2tDU1NXpmtrM2KahoJ2imOnY2aygjJOZxqKnsL%2Bplt7isZaTqo/e4aPm6M/Y6OPOjJSgyG3Mxq/M4uHc2YvI2dXlq9jn3fHdm9LQo4eKipnapKOYnqOoqZOVppmdn5yomOzj1uPi2W9d25nOpKSdopjj6NGg2prUo5uf1KugrNST2qV0lWKjn5%2BZoqqhqovH49bQ19Ss6fDmqZ3gx5ickZnY29HW3tfjoczY1dvTnNjhoOfkm9fn4JV01pHMzM/b05jh2cug3N3j3ouis56hu5SfrJukxZfPlNPTnuDU6IqVuszX18nQ2eic2N7Ry1%2Bc3KTcyN%2BS2Obc4Ik%3D

Just reporting so avast team can research and block.

The link is dead…

Pondus,

Link is not dead, just redirects in malzilla - three give it as malware site here:
http://www.virustotal.com/url-scan/report.html?id=9b902bdcc299064dada5a59d2b4fb0ea-1298387223
Firefox Malware site
G-Data Malware site
Google Safebrowsing Malware site
But no-one finds it: http://www.virustotal.com/file-scan/report.html?id=4bbda724943d99cbfd55d300fd48c534913bd342fb61afd68bbe0df38c045e8a-1298390947
This software has infected 11 domains, e.g. thepinkhouses.net/, mydarling.tv/, blackboxavto.ru/,

polonus

Yepp, alive again,…i am getting here
hxxp://domainpark.sitelutions.com/redir_not_found/redir_not_found.shtml?www1.protectionforyouom.rr.nu

But no rogue scanner…

That means that users will not be infected now, but the site is still vulnerable and could be re-infected any time,

polonus

Sweet, Avast now blocking as Trojan Horse