Weekly Escan Antivirus Updates Spammers

I'm not sure how many companies know this, but employing spammers to actively promote your software or services is never a good idea.

Spamming is certainly not a very good way to build goodwill or improve your reputation, in fact it's actually a really great way to ruin your reputation. I guess sometimes you just have to learn the hard way.

eScan Antivirus Updates Spammers

Lately we've had representatives from 'security' companies such as eScan AV spamming our forums with topics about their products, like Weekly eScan Antivirus Updates Spam and eScan weekly offline updates spam

Email addresses used for signing up to spam the forums, were "softwaresubmissions @ escanav.com" and "mojas @ escanav.com".

These could be two different employees or the same person fom the same IP address, and possibly their job is dedicated to spamming forums and submitting unwanted news about weekly anti virus updates from eScan.

Just for the record, it's the wrong way to let people know about your updates, and the right way to get banned from a forum.

It's also interesting to see that all of our forum spammers lately from 'internet security' and 'computer help services' related companies are from India.

eScan Antivirus Spammer 1

Username: eScan Antivirus
email: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
IP Address: 114.143.184.218

eScan Antivirus Spammer 2

Username: Mojas Pakhre
Email : This e-mail address is being protected from spambots. You need JavaScript enabled to view it
IP Address: 114.143.184.218

inetnum: 114.143.184.1 - 114.143.184.255
netname: ISPCUST
descr: IPS Pool
country: INDIA

route: 114.143.0.0/16
descr: TTML IP Pool
origin: AS17762

eScan AntiVirus Details

escanav.com
216.128.17.76

Registrant:
MicroWorld Technologies Inc
33045 Hamilton Court East
Suite 105
Farmington Hills, Michigan 48334
United States

Administrative Contact:
Ramamurthy, Govind govind @ mwti.net
MicroWorld Technologies Inc
33045 Hamilton Court East
Suite 105
Farmington Hills, Michigan 48334
United States
+1.2488489081 Fax -- +1.2488489085

mwti.net
216.128.17.76

Domain Name: MWTI.NET
Name Server: NS1.MAXIMUMASP.COM
Name Server: NS2.MAXIMUMASP.COM
Status: clientTransferProhibited
Updated Date: 30-mar-2010
Creation Date: 24-oct-2001
Expiration Date: 24-oct-2015

Registrant:
MicroWorld Software Services Pvt Ltd
Road No 15, Plat No 90,MIDC
Marol,Andheri East
Mumbai, Maharashtra 400093
INDIA

These guys are hosted at Maximumasp - 216.128.17.0/24
see more details at Robtex : http://www.robtex.com/dns/www.escanav.com.html#records

Their mail goes through India :

mail.mwti.net
123.252.235.210
India
123.252.235.0/24
AS17762
HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd AS Number

Related Domains on 216.128.17.76

*.escan-antivirus.com
*.microworld.de
*.mspl.net
*.msspl.co.in
*.mwti.com
escanav.com
microworld.de
microworldsystems.com
mspl.net
msspl.co.in
mwti.com
mwti.de
mwti.net
www.escanav.com
www.msspl.co.in
www.mwti.com
www.mwti.net

So congratulations, you guys at eScanav have my attention now. I'm hunting all your IP ranges down to make sure they are blocked everywhere and all you're forum spamming efforts get shutdown. Have fun playing with your updates.