found a FAKE Avast antivirus: http://www.avastantivirus.cc

hxxp://www.avastantivirus.cc/it/install_setupitapro.exe.exe FAKE AVAST ANTIVIRUS
The site hxxp://www.avastantivirus.cc is fraudolent, please take legal actions against the owner of this site.

http://img257.imageshack.us/img257/4659/avast2bi6.jpg

http://img257.imageshack.us/img257/5617/avast3yj1.jpg
<----- 899 fraudolent telephone numbers

canonical name www. avastantivirus.cc.
aliases
addresses 78.129.142.9
Domain Name: AVASTANTIVIRUS.CC
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.OPERADORMOVILSMS.COM
Name Server: NS2.OPERADORMOVILSMS.COM
Status: CLIENT-RENEW-PROHIBITED
Status: CLIENT-XFER-PROHIBITED
Status: CLIENT-UPDATE-PROHIBITED
Status: CLIENT-DELETE-PROHIBITED
Updated Date: 16-jul-2008
Creation Date: 15-jul-2008
Expiration Date: 15-jul-2009

inetnum: 78.129.142.0 - 78.129.142.255
netname: Rapidswitch_9
descr: Rapidswitch Ltd
country: GB
admin-c: AR6363-RIPE
tech-c: AR6363-RIPE
status: ASSIGNED PA
mnt-by: RAPIDSWITCH-MNT
changed: abuse@rapidswitch.com 20071009
source: RIPE

Where does the link to the fake installer (install_setupitapro.exe.exe) come from?
I mean, the “home page” of this site links only original installers (setupitapro.exe), as far as I can see.

look here: (may be you need an Italian IP to see the trap, in fact the 899 dialer is only valid for Italians)


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />




 <style type="text/css">

 /*
  USAGE: All you have to do is include this one line in your CSS file, with the
  tag names to which you want the script applied:
 */

 img, div { behavior: url(img/iepngfix.htc) }

 /*
  Alternatively, you can specify that this will apply to all tags like so:
   * { behavior: url(img/iepngfix.htc) }
 */

 </style>




 <script type="text/javascript">
 //<![CDATA[

 // If you don't want to put unstandard properties in your stylesheet, here's yet
 // another means of activating the script. This assumes that you have at least one
 // stylesheet included already. Remove the /* and */ lines to activate.

 /*
 if (document.all && document.styleSheets && document.styleSheets[0] &&
  document.styleSheets[0].addRule)
 {
  // Feel free to add rules for specific tags only, you just have to call it several times.
  document.styleSheets[0].addRule('*', 'behavior: url(iepngfix.htc)');
 }
 */

 //]]>
 </script>





<title>Avast! 4.8.1201 Professional Edition</title>
<link href="style.css" rel="stylesheet" type="text/css" />
<!--[if IE 6]>
<link href="style_ie6.css" rel="stylesheet" type="text/css" />
<script src="img/pngfix.js" type="text/javascript"></script>
<![endif]-->
<script src="Scripts/AC_RunActiveContent.js" type="text/javascript"></script>

</head>

<body>
<div id="content">
	<div id="header">
	<div class="paddings"><a href="install_setupitapro.exe.exe"><img src="avast-free_logo.jpg" alt="Avast! 4.8.1201 Professional Edition" width="124" height="89" border="0" /></a></div>
    <div class="programa"><a href="install_setupitapro.exe.exe">Avast! 4.8.1201 Professional Edition</a></div>
  </div>
  <div id="menubar"><a class="on" href="./">Avast!</a>
        <a href="caracteristicas.html">Caratteristiche</a>
        <a href="manual.html">Manuale</a>
        <a href="faq.html">FAQ</a>
        <a href="soporte.html">Supporto</a>  </div>
<div id="body">
   	  <div id="part1">
	  
	  <div id="screen">
        <a href="install_setupitapro.exe.exe"><img src="d2c0614aa30e848e49ff9c14a0130964.jpg" width="284" height="179" border="0" /></a>       </div>
	  
<div class="descripciones">
        	<div class="text1">
        	  <a href="install_setupitapro.exe.exe">Avast! 4.8.1201 Professional Edition</a>
        	</div>
             <div class="text2">
				Avast è un antivirus potente, efficace e gratuito.
		 	 </div>
             <div id="caract" style=""> <img src="img/icono.gif" alt="" /> Data: 
               	  <span id="txt_info" style="padding-left:4px">2008-05-16</span></div>
                  <div id="caract" style="">  <img src="img/icono.gif" alt="" /> Lingua: 
                  <span id="txt_info" style="padding-left:4px">Italiano</span></div>
                  <div id="caract" style="">  <img src="img/icono.gif" alt="" /> Dimensioni: 
                  <span id="txt_info" style="padding-left:4px">23120520 bytes</span></div>
                  <div id="caract" style="">  <img src="img/icono.gif" alt="" /> Requisiti minimi: 
                  <span id="txt_info" style="padding-left:4px">Pentium® III 700 Mhz / RAM: 128 MB</span></div>
                  <div id="caract" style="">  <img src="img/icono.gif" alt="" /> Requisiti raccomandati: 
                  <span id="txt_info" style="padding-left:4px">Pentium® IV 1,7 Ghz /  RAM: 512 MB</span></div>
                  <div id="caract" style="">  <img src="img/icono.gif" alt="" /> Licenza: 
                  <span id="txt_info" style="padding-left:4px">Trial</span></div>
        </div>
  
    </div>
    <div id="flecha_derecha">
            </div>
		  <div id="ads_horizontal">
			<a href="install_setupitapro.exe.exe">&nbsp;&nbsp;&nbsp;&nbsp;Scaricarlo qui <!--Avast!--></a> 
	<div class="version">
    	Ottenere l&acute;ultima versione
    </div>
		</div>
        <div id="flecha_derecha_2">
        </div>
        <div id="part2">
		
		 <div class="header">Descrizione - Avast!</div>

			
        	<div class="texto">
            <div class="banneripod_right">
<script type='text/javascript'><!--//<![CDATA[
  var m3_u = (location.protocol=='https:'?'https://ads.operadormovilsms.com/www/delivery/ajs.php':'http://ads.operadormovilsms.com/www/delivery/ajs.php');
  var m3_r = Math.floor(Math.random()*99999999999);
  if (!document.MAX_used) document.MAX_used = ',';
  document.write ("<scr"+"ipt type='text/javascript' src='"+m3_u);
  document.write ("?zoneid=82");
  document.write ('&amp;cb=' + m3_r);
  if (document.MAX_used != ',') document.write ("&amp;exclude=" +
document.MAX_used);
  document.write ("&amp;loc=" + escape(window.location));
  if (document.referrer) document.write ("&amp;referer=" +
escape(document.referrer));
  if (document.context) document.write ("&context=" +
escape(document.context));
  if (document.mmm_fo) document.write ("&amp;mmm_fo=1");
  document.write ("'><\/scr"+"ipt>");
//]]>--></script><noscript><a
href='http://ads.operadormovilsms.com/www/delivery/ck.php?n=a64ea8b5&amp;cb=INSERT_RANDOM_NUMBER_HERE'
target='_blank'><img
src='http://ads.operadormovilsms.com/www/delivery/avw.php?zoneid=82&amp;cb=INSERT_RANDOM_NUMBER_HERE&amp;n=a64ea8b5'
border='0' alt='' /></a></noscript>
</div>

            Avast è un antivirus potente, efficace e gratuito.

Avast dispone di un’ampia lista di virus, worm e troiani che permettono di trovare qualsiasi tipo di minaccia per il sistema, incluso contro virus capaci di automodificarsi. Questa lista si attualizza costantemente. Grazie a ciò, la possibilità di infezione e il rischio di perdere dati o di dover istallare nuovamente il sistema, viene ridotto al minimo.

Inoltre include:

•	Kernel antivirus.

•	Interfaccia di uso semplice.

•	Protezione costante a partire da una continua analisi della memoria residente e di tutto il sistema.

•	Si integra a certi programmi per una maggiore protezione, come ad esempio i P2P o i navigatori, i quali si trovano sempre esposti. Include inoltre protezione per gli elementi condivisi in una rete (sia Internet o domestica).

•	Supporto per 64-bit.

•	Attualizzazioni automatiche.</div>
            <div class="contacto">
            	<img src="img/icono.gif" alt=""/> <a href="soporte.html">Contatto - Assistenza</a>

                <img src="img/icono.gif" alt="" /> <a href="condiciones.html">&Egrave; necessario accettare i termini e le condizioni di scaricare qualsiasi programma</a> 
            </div>

            <div id="flecha_derecha">
            </div>
		  <div id="ads_horizontal">
			<a href='install_setupitapro.exe.exe'>&nbsp;&nbsp;&nbsp;&nbsp;Scaricarlo qui <!--Avast!--></a> 
	<div class="version">
    	Ottenere l&acute;ultima versione
    </div>
		</div>
        <div id="flecha_derecha_2">
        </div>

            
<div id="bannerbottom">
<script type='text/javascript'><!--//<![CDATA[
  var m3_u = (location.protocol=='https:'?'https://ads.operadormovilsms.com/www/delivery/ajs.php':'http://ads.operadormovilsms.com/www/delivery/ajs.php');
  var m3_r = Math.floor(Math.random()*99999999999);
  if (!document.MAX_used) document.MAX_used = ',';
  document.write ("<scr"+"ipt type='text/javascript' src='"+m3_u);
  document.write ("?zoneid=83");
  document.write ('&amp;cb=' + m3_r);
  if (document.MAX_used != ',') document.write ("&amp;exclude=" +
document.MAX_used);
  document.write ("&amp;loc=" + escape(window.location));
  if (document.referrer) document.write ("&amp;referer=" +
escape(document.referrer));
  if (document.context) document.write ("&context=" +
escape(document.context));
  if (document.mmm_fo) document.write ("&amp;mmm_fo=1");
  document.write ("'><\/scr"+"ipt>");
//]]>--></script><noscript><a
href='http://ads.operadormovilsms.com/www/delivery/ck.php?n=a453ee54&amp;cb=INSERT_RANDOM_NUMBER_HERE'
target='_blank'><img
src='http://ads.operadormovilsms.com/www/delivery/avw.php?zoneid=83&amp;cb=INSERT_RANDOM_NUMBER_HERE&amp;n=a453ee54'
border='0' alt='' /></a></noscript>
</div>


        </div>
  </div>
    <div id="texto_final">
Questa pagina non appartiene a nessun progamma d&acute;affiliati. Questo programma si deve utilizzare d&acute;accordo alla normativa di propiet&agrave; intellettuale, puo raggiungere la versione gratuita di questo programma dalla web ufficiale. Non si permette l&acute;utilizzo di cracks,  serial o keygen. Questo portale non si fa responsabile dell&acute;uso inadeguato del programma.

La sua richiesta si ha inviato correttamente. Tra poco L&acute;arriver&agrave; una risposta. Grazie per utilizzare i nostri servizi.

Per motivi tecnici l&acute;invio della sua richiesta ha fallito. Ci scusiamo per i disagi causati.
	</div>


</div>
</body>
</html>

http://img247.imageshack.us/img247/5394/fakeavastad6.png

What about this website http://www.avastuk.com/ and also http://www.avastuk.com/? Fake also?

rassel: No, it’s our English reseller’s site.

cusano: Yes, it’s possible that the wrong files are shown only when browsing from in Italian ISP, thanks.