TOKYO (MacHouse) – After being kicked out of New York-based web hosting company Ezzi.net, the international cyber crime organization behind the fake anti-virus scan scam appears to have moved its Antivirus 2008 website to the Netherlands. The fake antivirus scan website hosted through the domain of antivirus-scanonline.com distributes a Window-based file that contains a Trojan computer virus known as Troj/FakeVir-BF. This organization also distributes a Windows-based malware title called Antivirus 2008.
 Screenshot 01 – Source: MacHouse |
 Screenshot 02 – Source: www.leaseweb.com |
 Screenshot 03 – Source: www.leaseweb.com |
The new IP address of the fake anti-virus scan website through the domain of antivirus-scanonline.com is 85.17.93.42. The website appears to be hosted by a web hosting company called LEASEWEB in the Netherlands. (Screenshot 02 shows web hosting company’s English index page.) Let’s see how long they can stay in the Netherlands. If you are a victim of this fake anti-virus scan website, you are advised to contact LEASEWEB and to make them aware that they are hosting a scam website. If 500 people write to them daily and urge them to shut down the fake anti-virus scan website, the web hosting company will probably be moved. (See Screenshot 03 for their contact page.)
References:
New York-Based Web Hosting Company Ezzi.net Failing to Pull the Plug Off Fake Anti-Virus Scan Websites
Hopefully, Saying Good-Bye to the Fake Anti-Virus Scan Websites of ANTIVIRUS-SCANNER.COM and ANTIVIRUS-SCANONLINE.COM for Now…
Victims of ANTIVIRUS 2008 (Malware) & Troj/FakeVir-BF Growing Exponentially
Failure to Remove Ill Files Converts Beacon University Websites Into Redirection Points for ANTIVIRUS-SCANONLINE.COM
ANTIVIRUS-SCANONLINE.COM: Response to a Comment at FORUMS.SLICKDEALS.NET
The Name of A Next Anti-Virus Scan Domain Will Be…
File Determined to Contain Troj/FakeVir-BF
What Do We Know About These Fake Anti-Virus Scan Websites?
Lehigh University’s Multiple Department Websites Exploited for Redirection to ANTIVIRUS-SCANONLINE.COM
ANTIVIRUS-SCANONLINE.COM: 15 Websites Victimized in the Latest ‘?prj’ Exploitation Scheme
Warning: A New Fake Anti-Virus Scan Website Discovered
