Is this an infected page?

https://www.virustotal.com/url/f66d900a59bcdd41f642f03454d8cd426e4264fdc249b90e25c59dce1aebccbe/analysis/1341883099/

Well, all of the security provider say its a clean site but I think its a malware site.

It shows a picture of Microsoft Essentials saying that the pc is infected but its surprising that 28 Av companies said that its a safe page

It downloads a rogue antivirus.

http://www.bleepingcomputer.com/virus-removal/remove-windows-profound-security

Attachment is of interface.

@ Chris Thomas

I don’t believe that the VT URL scanner is worth a great deal.

You only have to look at some of the detections made by the Web Shield which are (confirmed good detections after investigation) uploaded for the conventional VT scan only to find that the avast! is the only one to find anything.

You will notice in that VT URL scan results of the 28 scanners avast isn’t listed as it doesn’t do URL scans but live scans. But try visiting that site using avast and the Network Shield alerts.

thanks!..its a IP block for 31.210.109.35…which is very wise way of preventing the malware as the fakeav viruses change everyday ;D

although,i have the fakeAV installer…and i will report that to avast! :slight_smile:

Yes, this IP is a known FakeAV hotspot.