| View previous topic :: View next topic |
| Author |
Message |
sparsha
Trooper
Joined: Nov 06, 2007
Posts: 31
Location: India
|
 Posted: Thu Jan 03, 2008 11:57 pm Post subject: A few New avsystemcare/winfixer clone sites |
|
|
Clone of avsystecare/Winfixer has setup 29 new websites all the site uses the ip 72.52.225.11
The list of sites:
1. Alfaantivirus.com
2. Antivirusalmassimo.com
3. Barrevirus.com
4. Computervagt.com
5. Digitalerschutz.com
6. Elmejorcuidado.com
7. Ferramentantivirus.com
8. Filterprogram.com
9. Filtredevirus.com
10. Geeninfectie.com
11. Harddrivefilter.com
12. Keineinfektionen.com
13. Longueviepc.com
14. Maseg.net
15. Nonstopantivirus.com
16. Pcantivirenloesung.com
17. Pcsystemschutz.com
18. Plutoantivirus.com
19. Psbeveiligingssysteem.com
20. Riendevirus.com
21. Securepcguard.com
22. Sekyuritikojo.com
23. Sistemadedefensa.com
24. Sumejorantivirus.com
25. Totaltrygghet.com
26. Viruscontrolleuer.com
27. Viruswacht.com
28. Votremeilleurantivirus.com
29. Zeusantivirus.com
Well Microsoft alone detects the new variant.
http://bharath-m-narayan.blogspot.com/2008/01/new-batch-of-rogue-security.html
|
|
| Back to top |
|
 |
MAPKOBKA
Lieutenant
Premium Member
Joined: Jul 04, 2007
Posts: 163
|
| Posted: Fri Jan 04, 2008 1:29 pm Post subject: |
|
|
Where are the setup files located?
I think I am blind because i can not see them.
_________________
Kaspersky Lab Forum Moderator
KL Cert PSP
Virusinfo.info External Specialist
Alliance of Security Analysis Professionals Member
http://malwarecrawler.com - honeypot@malwarecrawler.com
|
|
| Back to top |
|
|
tetak
MIRT Team Lead
Premium Member
Joined: Jan 19, 2007
Posts: 5878
|
| Posted: Sat Jan 05, 2008 4:51 am Post subject: |
|
|
I wasn't able to find the malware but nobody should buy anything from any of those sites.
_________________
Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender.
Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx
|
|
| Back to top |
|
|
sparsha
Trooper
Joined: Nov 06, 2007
Posts: 31
Location: India
|
|
| Back to top |
|
|
MAPKOBKA
Lieutenant
Premium Member
Joined: Jul 04, 2007
Posts: 163
|
| Posted: Sun Jan 06, 2008 11:41 am Post subject: |
|
|
Kaspersky have added detection.
not-a-virus:Downloader.Win32.WinFixer.cs
_________________
Kaspersky Lab Forum Moderator
KL Cert PSP
Virusinfo.info External Specialist
Alliance of Security Analysis Professionals Member
http://malwarecrawler.com - honeypot@malwarecrawler.com
|
|
| Back to top |
|
|
tetak
MIRT Team Lead
Premium Member
Joined: Jan 19, 2007
Posts: 5878
|
|
| Back to top |
|
|
sparsha
Trooper
Joined: Nov 06, 2007
Posts: 31
Location: India
|
|
| Back to top |
|
|
tetak
MIRT Team Lead
Premium Member
Joined: Jan 19, 2007
Posts: 5878
|
| Posted: Sun Jan 13, 2008 7:37 pm Post subject: |
|
|
The 2 .exe files have the same MD5 hash, they are the same file.
I've added the file to the malware listserv.
_________________
Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender.
Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
