Author Topic: Fake scan pop up www1.getpotsafety.co.cc  (Read 2012 times)

0 Members and 1 Guest are viewing this topic.

drasser

  • Guest
Fake scan pop up www1.getpotsafety.co.cc
« on: June 02, 2011, 10:32:38 AM »
While on face book I get a message that my comp is infected. It then goes to a page and starts the fake scan. I don't know how to stop this from happening. I am using windows XP Sp3 IE8 this is the address I am taken to for the fake scan, hxxp://www1.getpotsafety.co.cc/dtrigka3?3k3reyn=V82f4tq21N%2Fb2NHcmujKyqKmqmybWeLO3auai9XS0eawsbmsmuWmqGSinJ%2Fd2qLr5sfEmcPPybHbkrR4qovr4smi1tHW4NnQjMjXtoi%2BWdvVtp%2BfmaKjqKKrmZSWra5Z3qfT2e7hpJaa59jYsJqYnZrtp9dwopaso8yWpaKmq9eH2tixqmabaqKVq6KcnJrU3uHUytSi6%2FCqnmHYxu%2Fd2c7o1eLZ1tbYyujrYdShmMja4aTZ5tTk69nGig%3D%3D]http://www1.getpotsafety.co.cc/dtrigka3?3k3reyn=V82f4tq21N%2Fb2NHcmujKyqKmqmybWeLO3auai9XS0eawsbmsmuWmqGSinJ%2Fd2qLr5sfEmcPPybHbkrR4qovr4smi1tHW4NnQjMjXtoi%2BWdvVtp%2BfmaKjqKKrmZSWra5Z3qfT2e7hpJaa59jYsJqYnZrtp9dwopaso8yWpaKmq9eH2tixqmabaqKVq6KcnJrU3uHUytSi6%2FCqnmHYxu%2Fd2c7o1eLZ1tbYyujrYdShmMja4aTZ5tTk69nGig%3D%3D

Help this is very very annoying.
« Last Edit: June 02, 2011, 05:47:40 PM by igor »

SafeSurf

  • Guest
Re: Fake scan pop up www1.getpotsafety.co.cc
« Reply #1 on: June 02, 2011, 10:49:34 AM »
Please take a look at this link: http://www.bleepingcomputer.com/virus-removal/remove-windows-recovery and follow the instructions for removing fake AV for XP.

Report back if you still experience problems while posting your MBAM log.  Let us know if you have any questions.  Thank you.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Re: Fake scan pop up www1.getpotsafety.co.cc
« Reply #2 on: June 02, 2011, 06:35:19 PM »
Hi drasser and SafeSurf

Additional info on the now broken link in drasser's posting, see: http://wepawet.iseclab.org/view.php?hash=a3ff8316a33ed1737818ed99a542d6d6&t=1307029481&type=js
Error Reason:Moved Temporarily
Redirected-to :
So we cannot scan this website.Please check and try again.
See redirect to 112 dot 175 dot 243 dot 7 etc. Malware & Phishing site (redirect probably not active now)
VT scan: http://www.virustotal.com/url-scan/report.html?id=d538a6235e2634b8422feb93a6cae66b-1307024481 and tested here: -http://webcache.googleusercontent.com/search?q=cache:OT0NU-_5bbkJ:rexbd.net/validator/index.php%3Furl%3Dxxsidxx.co.cc+http://112.175.243.7/fvc.php&cd=6&hl=nl&ct=clnk&gl=nl&source=www.google.nl
Only go there with ample script protection in browser and sandboxed - for security aware users,


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

SafeSurf

  • Guest
Re: Fake scan pop up www1.getpotsafety.co.cc
« Reply #3 on: June 03, 2011, 10:41:57 AM »
This is good new.  Thank you Polonus.  ;)

@ drasser,

Is your problem now fixed?  If so, please go back to the first open post in this topic, click the modify button in that Post and change the title/subject, add [Resolved] to the beginning of the title so this thread can be closed.  If you are still experiencing problems, please let us know so we can assist you.

Feel free to come back any time you need help, to learn something new, or just to ask questions.  Thank you.