http://msmvps.com/blogs/hostsnews/archive/tags/AntiSpywareControl/default.aspxTags: AntiSpywareControlenCommunityServer 2008.5 SP2 (Build: 40407.4157)http://msmvps.com/blogs/hostsnews/archive/2007/12/23/1413807.aspxSun, 23 Dec 2007 11:05:00 GMTd67277c4-116b-43f1-b688-e9ef184ea916:1413807winhelp20022http://msmvps.com/blogs/hostsnews/archive/2007/12/23/1413807.aspx#comments<p>Landing on the following site the viewer is presented with not only a &quot;IFrame.Exploit&quot; and the typical adult content, but several interesting banners ... (<a class="" href="http://www.mvps.org/winhelp2002/hosts.htm" target="_blank">MVPS HOSTS file</a> users are already protected from the IFrame.Exploit)</p> <p><img height="275" alt="" src="http://mvps.org/winhelp2002/blog/antispywarecontrol4.gif" width="529" border="1" /></p> <p>Look&nbsp;familiar? ... well let&#39;s see where this leads us ... (as if I didn&#39;t know ;)</p> <p><img height="349" alt="" src="http://mvps.org/winhelp2002/blog/antispywarecontrol.gif" width="502" border="1" /></p> <p>&quot;<em>Independently certified</em>&quot; ... and &quot;<em>100% free of viruses, adware and spyware</em>&quot; ... oh what a claim! Even if you try to cancel the (fake) scan the download is still loaded.</p> <p><img height="269" alt="" src="http://mvps.org/winhelp2002/blog/antispywarecontrol2.gif" width="412" border="1" /></p> <p>Seems my AV doesn&#39;t agree ... so who would you believe? ... yeah me too ...<br />And as you can see below there are several other culprits involved all WinFixer related ... including Limelight Networks.</p> <p><img height="492" alt="" src="http://mvps.org/winhelp2002/blog/antispywarecontrol3.gif" width="514" border="1" /></p> <p>The download is the same exact filename (install_en.exe) as the one from &quot;<a class="" href="http://msmvps.com/blogs/hostsnews/archive/2007/12/17/1401525.aspx">SpyGuardPro</a>&quot; which also produces the same detection results from VirusTotal.</p><div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1413807" width="1" height="1">AntiSpywareControl