Another bogus Online Scanner

Landing on the following site the visitor is presented with what looks like an online scan ...

"Online Security Scanner requires ActiveX controls to repair your computer."  yeah right!

My AV (NOD32) detects the download (webinst.cab) as: Win32/TrojanDownloader.Agent.NUS

Other related entries ...

scanner.malwarealarm(dot)com
scanner.malwarealarms(dot)com
scanner.malware-scan(dot)com
scanner2.malware-scan(dot)com
scanner.shredder-scanner(dot)com
scanner.shredder-scanner(dot)com
scanner.spyshredderscanner(dot)com
scanner.spyshredder-scanner(dot)com
scanner.xmalwarealarm(dot)com
scanner.xmalware-scan(dot)com

xscanner.malwarealarm(dot)com
xscanner.shredder-scanner(dot)com
xscanner.spyshredderscanner(dot)com
xscanner.spyshredder-scanner(dot)com
xscanner.xmalwarealarm(dot)com

They all use basically the same scam to try and trick the user into thinking they are infected ... well you will be if you allow them to install anything on your machine ... also notice the WinFixer clone (advancedcleaner) - blocked entry in red ...

Published Mon, Feb 18 2008 6:42 by winhelp2002