Redirect used in Fake AV campaign

Viruses and worms
1

See: Malicious redirect to Location: htxp://tradehilton.ru/siga?7 see: http://killmalware.com/kratterholdings.com/# Not detected?

pol

2

the link is unavailable
address this in error

url blacklist

https://www.virustotal.com/en/url/c30a9d68f61c8c3a1dcfbbc33beada0344f79de979520c88175b016d1e9a7e16/analysis/1403216524/

http://www.siteadvisor.com/sites/tradehilton.ru

http://sitecheck.sucuri.net/results/tradehilton.ru

malicious

http://zulu.zscaler.com/submission/show/0fbc4ca6768bc87a5787b764cda15495-1403216975

3
[b]malicious[/b] http://zulu.zscaler.com/submission/show/0fbc4ca6768bc87a5787b764cda15495-1403216975
Was malicious ...... site is down
4

Hi Damian,
This site is also listed here http://snovit.com/ffa/cwo.pl (Who is mr virus !?)
Also,what do we have here http://snovit.com/cache/
Check http://evuln.com/tools/malware-scanner/kratterholdings.com/

5

Hi folks,

Thanks for the follow-up, your awareness and informed reactions.
Nice to have you around constantly feeling the avast! pulse,
helping our avast! user community keep malcode campaign threats at bay ;D

Damian