More bogus Free Celebrities Movies

The following site advertises quite a few "Free Celebrities Movies" ... but that's not what you get ...

 (Image edited for display purposes)

As you can see there are several culprits involved ... porntubq(dot)com detected as: HTML/TrojanClicker.Agent.F
then "64.28.183.26" loads the ActiveX to "helpticket(dot)net - you can see the VirusTotal results here.

helpticket(dot)net is hosted at: Cernel via ESTDOMAINS/PrivacyProtect (64.28.183.26 = Cernel)

Published Sun, Jan 27 2008 2:58 by winhelp2002