http://{blocked}76.216.82/buy. php?affid={id}

April 14, 2011

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Paul Tiu

---

 URL BLOCKING DATE/TIME: 02 Mar 2011 12:58:00 PM GMT-8

 RATING: HIGH

 DOMAIN: 94.76.216.82

 CATEGORY: Disease Vector

 DESCRIPTION: TROJ_FAKEAV.FDHQ redirects to the following URLs when the user tries to purchase the rogue application.

Related Malware

• TROJ_FAKEAV.FDHQ