Some websites reporting common error code contain adware

By Dan Kaplan on Dec 5, 2006 12:22PM

Hackers are using 404 error messages to their advantage by creating fake sites containing the message to load spyware and adware, security researchers said today.

Correction: iTnews erroneously reported that PC Tools' Spyware Doctor application was the deceptive adware that users were asked to install. The correct name of the software in question is System Doctor, and neither Spyware Doctor or PC Tools are associated with WinFixer.

One particular site - http://404dnserror(dot)com - "tries to install an ActiveX control and the installation message communicates that page is not available as it's blocked by adware/spyware," said Bhaskar Krishna on the McAfee Avert Labs blog today.

The site asks users to install security software called "System Doctor" to remove the adware and spyware that is supposedly preventing the site from opening. But System Doctor is part of WinFixer, adware that uses deception to encourage people to purchase often rogue software.

According to Symantec, WinFixer is software that "may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats."

Krishna said users should be wary of bogus websites reporting error codes as they surf the Internet.