📜 ⬆️ ⬇️

No viruses? We will find!

Recently, I began to notice on the walls “in contact” messages like “Hello! From you spam knocks tons! Urgently check the link below. ” Usually he always clicked on “This is spam” and the message disappeared without a trace. Links in messages are different.

But today, it jerked to see what it is. Details - under the cut.

So, having copied the link into the browser, I went to the address, after which there was a redirect to the site , at which the redirect goes with the referrer (not so important for us, but for some reason, obviously, it is necessary).
My gaze was opened at first glance, a pretty site that called for protecting your computer from spammers.
Protect your computer from viruses and spammers!

Your friends will no longer receive SPAM from your Vkontakte or ICQ account!
')
Internet Bastion is a universal super protection against hacking of your computer, as well as quick cleaning of your system from any viruses. With the help of our service, you will be able to fight viruses and spammers on social networks Vkontakte, Odnoklassniki, as well as in ICQ. Stop sending spam from you to your friends once and for all! Do not allow spammers to use your accounts on your behalf!
Protect 100% of the information on your computer!

Our database contains: 11024 viruses (new 22)

Universal super protection includes anti-virus, anti-spam and anti-phishing! In both! A super combine is easy. I already thought it was a sinful thing that a new product for fighting viruses appeared on the market, but I was embarrassed by the fact that spam mailings are used for PR.

Well, the big green button with the inscription “Check computer” says. Of course, I could not resist. I have been notified what will happen:
Will be checked for:
  • viruses and malware
  • spam vulnerabilities
  • the possibility of password theft

Then we have the opportunity to read the user agreement in a small window, although I found a link to it at the bottom of the page. I am not a lawyer, so I can not comment, I will draw your attention to only one point that seemed interesting to me:
2.4. The site does not guarantee the reliability of the results. The information on the Site is independently created by the Site Administration from public sources of information.


We start the "scan". Here the most interesting thing began:

image

Oh miracle! I have a virus in the dll file! Along the way System32! And all this is in ubunt!

Next was a check for cookies. I scanned a bunch of cookies, which I carefully erased before opening this site. There were even classmates. It should be noted, I am not registered on this site and do not go there. Of course, there was also some kind of “virus” there.

Then there was a check of my ip on the fact of sending spam. Surprisingly, she did not find something for a long time.

Here are the results:

image

Well, since my computer is infected, I need to install protection . I pressed the button, and then the following method:

image

The cost of sms 3x30 UAH, it turns out a little more than 11 dollars. Sms, of course, I did not send.

I am more than confident that “protection” is a continuation of the spamming chain. Only for money.

PS It is not excluded that this site may create authorization sessions.

Source: https://habr.com/ru/post/81516/


All Articles