We found two new rogue security products using the same name “Extra Antivirus”
One of them belongs to the Virusdoctor family of rogue security products.
This rogue uses the same site that was earlier used by Extra Antivir. Like its predecessors this rogue also uses Google Code site as a free way to host its installers.
The other Extra Antivirus rogue is from WinSpywareProtect family of rogue security products.
This rogue uses the same home page and fake/scare scanner page template used by Extra Antivir.
Sites Involved:
206.53.61.74 Extraantivir com
94.75.209.11 Extrantivirus com
195.88.81.117 dl.exstra-scanner-av com
195.88.80.208 Int.extro-reports net
Bharath M N