http://{blocked}76.216.82/buy. php?affid={id}

 Analysis by: Paul Tiu

 URL BLOCKING DATE/TIME: 02 Mar 2011 12:58:00 PM GMT-8
 RATING: HIGH
 DOMAIN: 94.76.216.82
 CATEGORY: Disease Vector
 DESCRIPTION: TROJ_FAKEAV.FDHQ redirects to the following URLs when the user tries to purchase the rogue application.

Related Malware