9991 of the garbage promotion has been found again

Promote

9991 of the garbage promotion has been found again

QQ expression would have been widely welcomed by the user A practical tool, however, some people have recently taken advantage of the QQ expression of love, turning it into a vicious virus. Recently, the author constantly received help phone, by a name of a lot of QQ expression virus harassment. The writer then investigated the tool software and found that there was an amazing secret behind it.

The truth: The public bundle spreads, is referred to the hidden virus

Baidu search on the "QQ expression", to find the relevant web page about 1,660,000, search "a lot of QQ expression", to find the relevant web page about 660,000, through this simple calculation, a lot of QQ expression QQ expression Market nearly 40% of the market share. So what kind of software is the software that has an astonishing market share?

According to its official introduction, a lot of QQ expression is a special for Tencent QQ users to create free software, to provide a stunning QQ expression, click on the QQ expression can be imported, after the introduction can be used in QQ chat, enrich your dialogue. At the same time, QQ facial expression also to the software author and webmaster issued a price, said that will be 0.05 yuan per the prices and software bundles, and special statement, in the installation after the success in the Add Delete program can see "a lot of QQ expression" option, can be free to unload.

What exactly is the truth? In Baidu, the author found more is and help telephone similar content. See figure:

　　

At the same time, the author to a security friend for help, he said, a lot of QQ expression, although only 47K, but also on the surface can be loaded, but it does bind another called update virus. And that's far beyond the scope of the rogue software that you've defined before, because, in Norton and rising, you've defined update as a virus.

Behind: Business motives pop up global hundred websites

A lot of QQ expression dare to challenge the law, public bundle of malicious virus, what is the purpose? The author then carried out further investigation on it. First of all, the author opened its pop-up 9991 link to the first site, surprised to find that the site was founded in October 2005 the second week, in the Alexa rankings incredibly has risen to the world's top 100. If 1万来 calculated according to its reach value, its flow rate has reached one-seventh of Sina.

So what is the site through the magic of the 3 months from 0 to do the world 100? That is the front by Norton and rising to identify the many QQ expression carried upadate virus. At the same time, the author opened a lot of QQ expression points to other related websites, also found that this vicious virus brought about by the huge flow of these sites in a short period of time to catch the super rockets.

Who's behind this?

In Baidu, the author input "9991" show the first result is "9991 Practical Life Network-Web site encyclopedia-classified Information-practical query", and the corresponding link is www.woyaoshang.com (I want to), rather than www.9991.com, go into a look, Content and 99,911, the relevant contact information and 9991 is exactly the same, you can conclude that they are the same person.

A blog in the Donews: "Now the site is playing" 9991.com is a green security site, a number of media publicity, recommended, point this view, it seems that the rogue improved, not engaged in the rogue cause, the key is before you rogue users how to get rid of pain!!!! Www.woyaoshang.com who is registered? They did not go to the domain name registrar to search, but directly to the www.alexa.com to check, the mailbox is whocool@163.com, and then back to Baidu Search this mailbox, the prototype came out! Mailbox all point to the same person-—— the famous Pang east. ”

It seems that the surface of the numerous evidence, all point to Pang east. But what is the truth behind the scenes? CCW Network will continue to follow the report.