posted on Sep, 30 2011 @ 04:40 PM
Originally posted by Springheel Jack
reply to post by yeahright
Here is the culprit //1heidi-algebra.345.pl/ptyapty/ac2c1c2131ea0rb01f3178a9f54da916/spl.php
edit on 30-9-2011 by Springheel Jack because: (no
edit on 30-9-2011 by Springheel Jack because: (no reason given)
That's ONE of the culprits.
ATS took away the old report a virus form and old links resolve to the "upload" page. Yesterday I requested (via complaint) a new link to report the
viruses. Never got one.
If I remember right the heidi one you listed went with the Java virus and then there are at least 3 more links I know of that go with a
"fingerprinting" viruses that opens the door for several downloader viruses (and probably the java one too). IPs always end up back at RIPE in
The ATS ad that is sending us these goodies starts with "pool2" in the name.
Specs Vista IE9 and Norton blocked all 4 of those viruses. Two diff viruses, 4 different URLS (not counting the hoster URL in the ad with pool2 in
edit on 30/9/2011 by Trexter Ziam because: add specs