http://{blocked}resh.com/shop? abc=cGdpZD04JnI9ODMuMA==

 Analysis by: Sylvia Lascano

 URL BLOCKING DATE/TIME: 13 Jan 2011 02:26:00 AM GMT-8
 RATING: HIGH
 DOMAIN: softwaresh.com
 CATEGORY: Disease Vector
 DESCRIPTION: TROJ_FAKEAV.WKA connects to this URL should the user choose to purchase the full version of the rogue product.

Related Malware