TOKYO (MacHouse) – We have found a new fake anti-virus website at the domain of antivirus-scanonline.com. Several new websites have been hacked and exploited. And files have been installed accordingly. Victimized websites are likely to have folders titled ‘uploads,’ ‘cache’ and possibly others where index#.php may be found. (# is any integer.) Upon accessing any spam link, one will be forwarded to a fake anti-virus scan website and forced to download a file labeled ‘AtnvrsInstall.exe.’ This Windows-based file is likely to contain a computer virus known as Troj/Dwnldr-HDG. Furthermore, the fake anti-virus scan website is possibly hosted under the cover of a deceptive web hosting company located in San Francisco, California, USA.
We will have a more detailed report in several hours.