This rogue uses xpdeluxe.exe as its file name, located under %UserProfile%\XP Deluxe Protector\. Panda security and the great folks over at BleepingComputer has more information and removal instructions.
It is still live at xpdeluxeprotector.com (IP: 91.212.65.140). The following domains are also hosted on the same IP: personaldeluxeguard.com and winpc-antivirus09.com.
No comments:
Post a Comment