Internet threat level: 1
Home→Blog→Incidents→January 26 2011→Pirate episodes scam
Pirate episodes scam
TV Series such as “The Simpsons” are hugely popular and have hundreds of thousands of fans around the world. Unlike “Southpark” - another hugely popular series - not all of them are freely available on the web though. As such, there is a high demand on the web for such episodes and as usually happens, scam tactics appear around them. Here’s one such example that we have seen recently on the popular website Dailymotion:
When trying to watch the pirate episode, a message will appear on screen claiming that the content has been removed due to copyright issues, but luckily you can still watch it at a special URL posted in the description field.
These URLs are always shortened (or masked) with services such as bit.ly, and clicking on them leads us to:
Once again, the content is not available immediately and to watch it one needs to access a special “offer”. Clicking on any of the offer links leads further to another page:
“IWON” (example file name: IWONSetup2.3.76.6.ZLman000.exe) is actually the infamous MyWebSearch Adware type of application, detected by most AV products, though not all. (KAV detects it as not-a-virus:WebToolbar.Win32.MyWebSearch.fr)
Though this application is not directly malicious, you may want to stay away from it, since installing the app won’t bring Homer to your screen and in addition, as recently shown by my colleague Roel, online ads can indirectly infect your computer even when shown by brand programs.
Be safe!
2011 Jan 27, 00:39
This Happend To Me The exact same thing happend to me but while trying to watch a star trek episode from www.allstepisodes.com. But it wasnt an add that popped up, it was a window from acrobat adobe that would not let me close it. So i figgured that it was a required download and now i have 4 virus' that kaspersky detected but for some reason i cannot remove them. Any thoughts on how I can get rid of them? |
|
2011 Jan 27, 12:09
Re: This Happend To Me Hi David! |
|
2011 Jan 27, 15:37
Similar virus alert notice While searching for county tax assessor information, a window opened alerting of virus infection. It looked very real but before following any instructions I ran the Kaspersky full scan and the Windows Defender full scan. Neither found anything at all! By the time the scans were completed, the window had defaulted to "HTTP: 404 - Webpage cannot be found". The URL was one of those that went on forever, but I did capture it. A search on each virus name found nothing. Here is a list of the virus names that were displayed in the suspicious window: |
|
2011 Jan 27, 17:07
RogueAV Hi Trish! |
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.