Limelight distributes hundreds of Rogue Antispyware products
Looks like Limelight is involved in distributing hundreds of Rogue Antispyware products ... the majority of these are from "LocusSoftware" which I have mentioned before. However I found an interesting video produced by Symantec that shows all these clones ... and there are hundreds! So let's take "SpyGuardPro" as an example ...
Oops ... Google has flagged this as a malicious site ...
Ok ... let's go there and see ... appears my AV (NOD32 v3) doesn't like it either ...
As you can see the download is attempted from "content.onerated.com" which is running from ... you guessed it.
Limelight Networks server. Scanning the download (install_en.exe) at VirusTotal revels the following:
This is the same exact file (install_en.exe) that I've mentioned before, and just to leave no doubt, this is the same installer detected by SunBelt which was used by WinFixer. So all LocusSoftware is doing is changing the embedded URLs within the file for each of the hundreds of clones it creates as seem in the Symantec video above ...
87.117.252.11 spyguardpro.com (hosted at Eukhost_ltd)
87.117.252.11 sale.spyguardpro.com (hosted at Eukhost_ltd)
204.16.204.56 jsp.spyguardpro.com (hosted at Setupahost)
204.16.204.56 protect.spyguardpro.com (hosted at Setupahost)
85.12.60.13 ykeeper.spyguardpro.com (hosted at Euroaccess)
Although it's doubtful that (US) officals can do anything about the foreign locations, they can certainly question the unsavory practices of LimeLight since it is a US company ...
"knock-knock" = "who's there?" The FTC (we can only hope!)