http://{blocked}50.209.245/buy .php?affid={id}

April 14, 2011

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Paul Tiu

---

 URL BLOCKING DATE/TIME: 02 Mar 2011 07:23:00 AM GMT-8

 RATING: HIGH

 DOMAIN: 69.50.209.245

 CATEGORY: Disease Vector

 DESCRIPTION: TROJ_FAKEAV.FDHQ redirects to the following URLs when the user tries to purchase the rogue application

Related Malware

• TROJ_FAKEAV.FDHQ