Thanks for the run down.
Lazy, sloppy or stupid certainly describes this group.
I picked up a sample of "TrojanDownloader:Win32/Zlob.gen!AL" from comment spam posted from 220.160.127.221.
They were unable to get the porn images and links inserted into their "CLICK IMAGES TO SEE FULL FREE GALLERY" rendering their post useless.
The "seopool.info" links redirected to "rockingmovs.com" domain which then pulls the "setup.exe" from viewdevice.com.
Losers.
Here is another domain distributing malware (trojan):
sydneyg.w8w.pl
it leads to the already mentioned encodeinstrument.com and xpantivirus.com
i want the address URL http://pcsecuritycenter.net/removed spywarephp affd=g4qe4
Taken off my computor: Someone will answer for this.
I HAVE HAD THIS SIMILAR WITH THE CONTRA TROGEN VIRUS UNTI I CONTACTED MY CONGRESS REPRESENTATIVE.
ON MY COMPUTER INFORMATION ABOUT YOUR UNINVITED PROGRAM JUST POP UP.
PROTOCOL: HYPER TEXT TRANSFER PROTOCAL
YOUR TYPE: NOT AVAIABLE
YOUR CONNETION :NOT ENCRYPED
SIZE NOT AVAILABLE
CREATEDNOT AVAILBLE
MODIFIED NOT AVAILABLE
REMOVE IT NOW OF MY COMPUTR SYSTEM I DO NOT WANT THIS KIND OF ADVERTISEMENT WITH TROJAN VIRUS.
I CHECK MY SURCURITY SERVICES
I WANT TO SEE THAT LITTLE SECURITY EMBLEM REMOVED FROM THE BOTTON END ON THE RIGHT SIDE BAR OF MY COPUTER.
I DO NOT BUY SECURITY
I ONLY DOWNLOAD FREE PRODUCTS
IF I DO NOT LIKE WHAT WORKS I DELETED
I KNOW SOMETHING UP AND GET IT OFF MY
COMPUTERBEFOREI CALL ONELINE AURTHORTIES
Commenting by HaloScan
