77.78.246.143 Malware detected when I am on Kaspersky's website?

Question

Okay so I was on their website and when I tried to visit the following page on their website:

http://kasperskyusa.com/files/?file=kis&lang=en&ver=2011&pn=Downloads+%7C+Product+Updates+%7C+Kaspersky+Internet+Security

I get a malware warning saying that webarh.com hosts malware. Since I was on kaspersky website I thought the warning was wrong so I clicked the procceded anyway button and then it says http://77.78.245.115 hosts malware. Again I thought the warning was a mistake so clicked proceed anyway. It then brought me to:
http://77.78.246.143/index.php?51y6=1CKC77S028UH63232&M4EK=MRgtaV&ODAT=0&tQi6=aJkkgVm4qLz9cUipMRlE4LUpPBQMcBANkH3B4bmd5bwk2AUtyRWVOdG4DIWRrZwQBAmUFClxSV34BIAMjCAJ7L3JRBzIGBg4peQQLBQAHDQJkBjYtKz0%3D&mWr=VDXhR&0ZUP=9T606T33931K3B5A1&67=52T1BHXIHV9J07C9Q2CX3GTXPUZ

which is a fake virus scanner. I know it is fake because it opens in the browser and you cannot click on the buttons. For example one of the drives it shows is a floppy drive which I do not have. I already have downloaded Kaspersky Complete Internet Security 2011 a few days ago and I'm scanning now.

This does not happen when I visit other websites. Why would Kaspersky bring you to Malware??? Has it been hacked???

Answer 1

I do believe Kaspersky has been hacked. I also went to their correct web site for downloading their software, which is http://usa.kaspersky.com/downloads/product-updates. However, you will be redirected to a Malware site that infects your computer. I led my own father down that road tonight and he followed the links and infected his computer. Nice security Kaspersky!! And I thought Kaspersky had real potential. It is unacceptable for a security company to be hacked like this.



FYI, Kaspersky has taken their download site offline now. They have finally firgured out they were hacked. No ETA on how long it will take for them to issolate the security issue and fix it. I am sure they will get great news press and reviews after this breach.

Answer 2

2

Answer 3

I was just installing Kaspersky Internet Security on a new PC and uncovered this suspicious redirect. After some investigation, I can confidently say that Kaspersky has been hacked. I can't wait for this to hit the news. Kaspersky Internet Security has allowed my computer to get infected twice in the last year, so this doesn't surprise me at all.



http://usa.kaspersky.com/downloads/product-updates

and

http://usa.kaspersky.com/downloads/product-downloads/kaspersky-internet-security/previous-versions



The preceeding pages are the legitimate update pages for Kaspersky, but they link to kasperskyusa.com which redirects to webarh.com, which infects your computer with a virus. Stay away.



kaspersky.com is registered with MarkMonitor and the whois information is correct:



Registrant:

Jeremy Baucom

Kaspersky Lab ZAO

10/1 1st Volokolamsky Proezd

Moscow 123060

RU

[e-mail] +7.4957978700 Fax: [phone]



kasperskyusa.com is completely different:

Kaspersky Lab

[e-mail]

ATTN KASPERSKYUSA.COM

care of Network Solutions

PO Box 459

Drums, PA 18222

US

Phone: [phone]

Answer 4

So..

you can find a free download of Kaspersky Antivirus here http://j.mp/1pIv0Bh

It's a really nice software.

Good Bye

Answer 5

kasperskyusa.com (the site you have visited) appears to be a KasperSky immitation. It is NOT the real USA region-based section of the KasperSky website. The correct website you are looking for is http://usa.kaspersky.com .



Malware authors often set up websites such as that to trick innocent users into believing they are on the same website that they have visited before... however, they are not. One notable example is tvvitter.com which looks a LOT like twitter.com in your URL bar.

Answer 6

i TRIED to go to it and my computer redirected me. Yes that has malware!

My computer does this whenever I might go into a site which hosts malware!



That site should be taken down and scanned!



DO NOT GO BACK TO THAT SITE AT ALL!!!



This web page at 77.78.246.143 has been reported as an attack page and has been blocked based on your security preferences.



thats what my computer says. I trust my computer.

Answer 7

http://usa.kaspersky.com/ i believe this is the correct website? Try this. I also run kaspersky and have never had any such trouble.