Windows Antivirus 2008
uses hxxp://wav2008.com

System Antivirus 2008
uses hxxp://sav2008.com

both are rogue security applications distributed by SSH Zlob trojan

Vista Antivirus 2008
hxxp://Vav2008.com

This one is a clone of the above said rogues

I've added both install files, the main .exe files and the 2 .cpl files to the malware listserv.

These people are using the same Danish phone number
(+45.36946676)
as the people responsible for storm/fast-flux :
http://www.disog.org/text/storm-fastflux.txt

A google for that phone number throws up lots of complaints
and malware reports, e.g.
/Backdoor_malware11361.html

Domains such as wav2008.com are registered for one year only,
another pointer to rogue status for a supposed large organisation.
wav2008.com and the others have a contact via privacyprotect.org.

privacyprotect.org, whether legitimate or not, is used
by many of these rogues to help cover their tracks.
http://www.siteadvisor.com/sites/privacyprotect.org?ref=safe&client_ver=FF_26.6_6265&locale=en-US&premium=false&client_type=FF&aff_id=0

_________________
Relax! It's just an opinion!
http://www.mywot.com/
http://www.siteadvisor.com/