Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: 404dnserror Adware SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
404dnserror Adware
Our read Tom sent us a note about a site called "404dnserror/dot/com" (DO NOT VISIT).

A user of his was infected with some spyware/adware. It kept redirecting them to the '404dnserror' page. The page looks like a generic server error, but also advertises an anti-spyware tool in the form of an ActiveX like installer toolbar at the top of the page. To save you the risk of exposing yourself to the site, I included a screen shot below (click on the image to see the full page).



Its probably save to block/montor access to this domain.

I will be teaching next: Intrusion Detection In-Depth - SANS Cyber Defense Forum & Training

Johannes

3944 Posts
ISC Handler
Dec 1st 2006

Sign Up for Free or Log In to start participating in the conversation!