Re: Security Web Site That Identifies Viruses at Target URL?

[~BD~]

David H. Lipman wrote:
> From: "W"<persistentone@spamarrest.com>
>
> | Is there an anti-virus website that you can give a URL to that would scan
> | that site and identify any virus/trojan that the site tries to install?
>
> It is hard to traverse the entire site but, this is a good start.
>
> http://www.urlvoid.com/
>
>

Did you notice that right in the most prominent position on that page is
an advertisement for Uniblue.com - the company which Dustin Cook has
advised distributes malware?

[~BD~]

~BD~ wrote:
> David H. Lipman wrote:
>> From: "W"<persistentone@spamarrest.com>
>>
>> | Is there an anti-virus website that you can give a URL to that would
>> scan
>> | that site and identify any virus/trojan that the site tries to install?
>>
>> It is hard to traverse the entire site but, this is a good start.
>>
>> http://www.urlvoid.com/
>>
>>
>
> Did you notice that right in the most prominent position on that page is
> an advertisement for Uniblue.com - the company which Dustin Cook has
> advised distributes malware?

A screenshot - saves many words!

http://i25.tinypic.com/2jhvl.jpg

[Buffalo]

~BD~ wrote:
> ~BD~ wrote:
>> David H. Lipman wrote:
>>> From: "W"<persistentone@spamarrest.com>
>>>
>>>> Is there an anti-virus website that you can give a URL to that
>>>> would scan that site and identify any virus/trojan that the site
>>>> tries to install?
>>>
>>> It is hard to traverse the entire site but, this is a good start.
>>>
>>> http://www.urlvoid.com/
>>>
>>>
>>
>> Did you notice that right in the most prominent position on that
>> page is an advertisement for Uniblue.com - the company which Dustin
>> Cook has advised distributes malware?
>
> A screenshot - saves many words!
>
> http://i25.tinypic.com/2jhvl.jpg

When putting in uniblue.com into URLvoid scanner you get:
2010-07-18 20:01:27 (GMT 1)Website uniblue.com Domain Hash
e51768b46bcc89d31a4611839f43cf8eIP Address 184.73.214.237 [SCAN]IP Hostname
ec2-184-73-214-237.compute-1.amazonaws.comIP Country US (United States)AS
Number 14618AS Name AMAZON-AES - Amazon.com, Inc.Detections 1 / 17 (6
%)Status SUSPICIOUS

One scanner ' MyWOT ' called it 'suspicious'
One scanner ' hpHosts ' called it 'unrated'
The other 15 called it 'CLEAN'


When uniblue.com was analyzed by Anubis the following was found:

"Summary:
- Changes security settings of Internet Explorer:
This system alteration could seriously affect safety surfing the
World
Wide Web.

- Performs File Modification and Destruction:
The executable modifiesand destructs files which are not temporary.

- Performs Registry Activities:
The executable reads and modifies registry values. It also creates
and
monitors registry keys."The whole report is at the link below:


http://preview.************/24ok3z3

Buffalo

[~BD~]

Buffalo wrote:
> ~BD~ wrote:
>> ~BD~ wrote:
>>> David H. Lipman wrote:
>>>> From: "W"<persistentone@spamarrest.com>
>>>>
>>>>> Is there an anti-virus website that you can give a URL to that
>>>>> would scan that site and identify any virus/trojan that the site
>>>>> tries to install?
>>>>
>>>> It is hard to traverse the entire site but, this is a good start.
>>>>
>>>> http://www.urlvoid.com/
>>>>
>>>>
>>>
>>> Did you notice that right in the most prominent position on that
>>> page is an advertisement for Uniblue.com - the company which Dustin
>>> Cook has advised distributes malware?
>>
>> A screenshot - saves many words!
>>
>> http://i25.tinypic.com/2jhvl.jpg
>
> When putting in uniblue.com into URLvoid scanner you get:
> 2010-07-18 20:01:27 (GMT 1)Website uniblue.com Domain Hash
> e51768b46bcc89d31a4611839f43cf8eIP Address 184.73.214.237 [SCAN]IP Hostname
> ec2-184-73-214-237.compute-1.amazonaws.comIP Country US (United States)AS
> Number 14618AS Name AMAZON-AES - Amazon.com, Inc.Detections 1 / 17 (6
> %)Status SUSPICIOUS
>
> One scanner ' MyWOT ' called it 'suspicious'
> One scanner ' hpHosts ' called it 'unrated'
> The other 15 called it 'CLEAN'
>
>
> When uniblue.com was analyzed by Anubis the following was found:
>
> "Summary:
> - Changes security settings of Internet Explorer:
> This system alteration could seriously affect safety surfing the
> World
> Wide Web.
>
> - Performs File Modification and Destruction:
> The executable modifies and destructs files which are not temporary.
>
> - Performs Registry Activities:
> The executable reads and modifies registry values. It also creates
> and
> monitors registry keys."The whole report is at the link below:
>
>
> http://preview.************/24ok3z3
>
> Buffalo
>
>

That is most interesting. Thanks for posting, Buffalo.

I do not have the technical knowledge to make a considered judgment on
the findings, but it doesn't look good to me!

Further comment welcomed.

Dave

[Dustin]

"Buffalo" <Eric@nada.com.invalid> wrote in
news:i399pv$jo9$1@news.eternal-september.org:

> ~BD~ wrote:
>> ~BD~ wrote:
>>> David H. Lipman wrote:
>>>> From: "W"<persistentone@spamarrest.com>
>>>>
>>>>> Is there an anti-virus website that you can give a URL to that
>>>>> would scan that site and identify any virus/trojan that the site
>>>>> tries to install?
>>>>
>>>> It is hard to traverse the entire site but, this is a good start.
>>>>
>>>> http://www.urlvoid.com/
>>>>
>>>>
>>>
>>> Did you notice that right in the most prominent position on that
>>> page is an advertisement for Uniblue.com - the company which
>>> Dustin Cook has advised distributes malware?
>>
>> A screenshot - saves many words!
>>
>> http://i25.tinypic.com/2jhvl.jpg
>
> When putting in uniblue.com into URLvoid scanner you get:
> 2010-07-18 20:01:27 (GMT 1)Website uniblue.com Domain Hash
> e51768b46bcc89d31a4611839f43cf8eIP Address 184.73.214.237 [SCAN]IP
> Hostname ec2-184-73-214-237.compute-1.amazonaws.comIP Country US
> (United States)AS Number 14618AS Name AMAZON-AES - Amazon.com,
> Inc.Detections 1 / 17 (6 %)Status SUSPICIOUS
>
> One scanner ' MyWOT ' called it 'suspicious'
> One scanner ' hpHosts ' called it 'unrated'
> The other 15 called it 'CLEAN'
>
>
> When uniblue.com was analyzed by Anubis the following was found:
>
> "Summary:
> - Changes security settings of Internet Explorer:
> This system alteration could seriously affect safety surfing
> the
> World
> Wide Web.
>
> - Performs File Modification and Destruction:
> The executable modifiesand destructs files which are not
> temporary.
>
> - Performs Registry Activities:
> The executable reads and modifies registry values. It also
> creates
> and
> monitors registry keys."The whole report is at the link
> below:
>
>
> http://preview.************/24ok3z3
>
> Buffalo
>
>
>

Suck on it BD, deep and long!


--
"I like your Christ. I don't like your Christians. They are so unlike
your Christ." - author unknown.

[~BD~]

Dustin wrote:
>
> Suck on it BD, deep and long!
>

OK - *It sucks*!

But, hey!

It was *recommended* by Roy C - the moderator of Annexcafe User2User and
a major player on Mark's BB (and previously on A/C Mainstreet)

--
Dave - you've not come across TechAngel's web site by chance, have you?

[Peter Foldes]

BD

And Roy C was told by some including me that it was a bad site that was mostly snake
oil. He also found out the hard way as you will.

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
http://www.microsoft.com/protect

"~BD~" <BoaterDave~no.spam~@hotmail.co.uk> wrote in message
news:sf2dnazIuaGUFcXRnZ2dnUVZ8iGdnZ2d@bt.com...
> Dustin wrote:
>>
>> Suck on it BD, deep and long!
>>
>
> OK - *It sucks*!
>
> But, hey!
>
> It was *recommended* by Roy C - the moderator of Annexcafe User2User and a major
> player on Mark's BB (and previously on A/C Mainstreet)
>
> --
> Dave - you've not come across TechAngel's web site by chance, have you?
>

[Dustin]

~BD~ <BoaterDave~no.spam~@hotmail.co.uk> wrote in
news:sf2dnazIuaGUFcXRnZ2dnUVZ8iGdnZ2d@bt.com:

> Dustin wrote:
>>
>> Suck on it BD, deep and long!
>>
>
> OK - *It sucks*!

Damnit, BD. you ruin my humour when you actually agree with me. I was
really expecting you to put up a fight or comeback with some wiseass
remark. When your civil like this, I have to respond in kind. ;p

> But, hey!
>
> It was *recommended* by Roy C - the moderator of Annexcafe User2User
> and a major player on Mark's BB (and previously on A/C Mainstreet)

I don't know who that individual is, sorry. I'm also unfamiliar with Mark
and mainstreet. No, I don't wish to learn more about either of them. I
find it difficult enough to keep up with the few things I have going at
this time.




--
"I like your Christ. I don't like your Christians. They are so unlike
your Christ." - author unknown.

[Dustin]

~BD~ <BoaterDave~no.spam~@hotmail.co.uk> wrote in
news:F7qdnX2NBu0zocrRnZ2dnUVZ7r6dnZ2d@bt.com:

> David H. Lipman wrote:
>> From: "W"<persistentone@spamarrest.com>
>>
>> | Is there an anti-virus website that you can give a URL to that
>> | would scan that site and identify any virus/trojan that the site
>> | tries to install?
>>
>> It is hard to traverse the entire site but, this is a good start.
>>
>> http://www.urlvoid.com/
>>
>>
>
> Did you notice that right in the most prominent position on that
> page is an advertisement for Uniblue.com - the company which Dustin
> Cook has advised distributes malware?
>

you sound as if I'm the only person who's ever said that. For the sake of
clarification, I will state the malware aspect is that of scamware.
Please do be sure you further I specified scamware if your going to
continue using my words for reference material.


--
"I like your Christ. I don't like your Christians. They are so unlike
your Christ." - author unknown.