Fake Downloader Sites Spreading Malware File Tubeplayer.ver.6.exe
January 8, 2009 – 11:35 amTubeplayer.ver.6.exe Malware File Found on multiple Fake Downloader Sites Spreading Trojan-Downloader.Renos and Trojan.Fakealert
A discovery has been made from many fake downloader sites where they spread the malware file that appears to be tubeplayer.ver.6.exe which may install Trojans. The Trojans that these sites may install were identified as being in the family of Trojan.Fakealert and Trojan-Downloader.Renos. One of these infections is known for running AV2009 (Antivirus 2009) which is a rogue anti-spyware program.
Through the process of fetching a rogue anti-spyware program such as AV2009 (Antivirus 2009) it displays numerous popus and alert messages. Several downloader sites have been identified to spread these infections onto computers over the internet through fake codec installers.
We compiled a list of these fake downloader sites from ThreatFire Research Blog, a security research site, and listed them below. Remember, do not visit any of the following sites for any reason. If you find that you have downloaded any files from the following sites then it may be in your best interest to follow a removal process for Trojans.
hxxp://2009download-best-soft.com
hxxp://2009download-best-soft.com
hxxp://best-ps-download-4pc.com
hxxp://best-ps-download-4pc.com
hxxp://downloabsecurehere1.com
hxxp://downloabsecurehere1.com
hxxp://downloabsecurehere2.com
hxxp://downloabsecurehere2.com
hxxp://downloabsecurehere3.com
hxxp://downloabsecurehere3.com
hxxp://downloabsecurehere4.com
hxxp://downloabsecurehere4.com
hxxp://download-all4free.com
hxxp://download-all4free.com
hxxp://downloadallsoftnow.com
hxxp://downloadallsoftnow.com
hxxp://download-allsoftnow.com
hxxp://download-allsoftnow.com
hxxp://downloadallsoft-now.com
hxxp://downloadallsoft-now.com
hxxp://downloadall-soft-now.com
hxxp://downloadall-soft-now.com
hxxp://download-files-bak.net
hxxp://download-fls.com
hxxp://download-fls.com
hxxp://download-softarch.com
hxxp://download-softarch.com
hxxp://download-top-software.com
hxxp://download-top-software.com
hxxp://download-top-software.net
hxxp://download-top-software.net
hxxp://download-top-software.net
hxxp://dwnld-files.com
hxxp://dwnld-files.com
hxxp://fast-download-base-free.com
hxxp://fast-download-base-free.com
hxxp://files-upload-21.com
hxxp://files-upload-21.com
hxxp://get-files-4free.net
hxxp://get-frsh-files.com
hxxp://get-frsh-files.com
hxxp://go-downloadz-pc-soft.com
hxxp://go-downloadz-pc-soft.com
hxxp://load-software-dowload.net
hxxp://load-software-dowload.net
hxxp://pure-download-new.net
hxxp://pure-download-new.net
hxxp://soft-4-you-download.net
hxxp://soft-4-you-download.net
hxxp://top-best-software-area.net
hxxp://top-best-software-area.net
(xx) put in place for of (tt) to help prevent you from visiting the sites listed above.
Have you ever visited any of the above sites to download any files? If so, you may want to remove the Antivirus 2009 program or Trojan files that may have been installed on your system.
