How long does it take to setup a malicious site?

Looks like you can register your site and start serving up malware all in the same day.

First you set up a bunch of throw-away sites to use for Spamdexing, then you post a huge amount of links which leads to:

"freeclipoftheday(dot)com" was registered today (Upl Telecom S.r.o) using PrivacyProtect to hide their identity ... clicking any of the button in the above bogus prompt leads to "iorproject(dot)com" registered Oct. 1 ... scanning the file "setup.exe" at VirusTotal results in a very poor detection rate (5/32 (15.63%) ... Trojan-Downloader.Win32.Zlob.dbr

Notice there are several redirects ... these are the throw-away sites used for Spamdexing, and the last redirect "getsomepornmovies(dot)com" was also registered today (Upl Telecom S.r.o)

Folks these Codec/Zlob infections are becoming very dangerous as some of the newer variants are now hijacking the LSPs
(Layered Service Providers) which requires a special removal tool (SmitFraudFix) yet other variants install a rootkit and most versions produce pop-ups on your machine (falsely) indicating that you are infected and then wanting you to download and scan your machine with a Rogue Antispyware product.

Published Wed, Oct 3 2007 23:50 by winhelp2002