CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Another Rogue security applciation

 
Post new topic   Reply to topic       All -> FavForums -> Web Malware Links [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
sparsha

Trooper
Trooper


Joined: Nov 06, 2007
Posts: 31
Location: India

PostPosted: Wed Jan 09, 2008 11:12 pm    Post subject: Another Rogue security applciation
Reply with quote

hxxp:\\Antispycheck.com

AntiSpyCheck is a successor of AdProtect Rogue security application.

Set up file scanned:

VirusTotal Scan Result: 3/32 (9.38%)

Avast 4.7.1098.0 2008.01.08 Win32:MailBot-N
Microsoft 1.3109 2008.01.08 Program:Win32/SpyAxe
NOD32v2 2775 2008.01.08 Win32/Adware.AdProtect

Back to top
View users profile Send private message
tetak

MIRT Team Lead
Premium Member

Joined: Jan 19, 2007
Posts: 5878

MIRT Premium

PostPosted: Sat Jan 12, 2008 5:28 am    Post subject:
Reply with quote

I downloaded asc_setup_light.exe from the site and scanned it with VT.

Result: 0/32 (0%)

I sent it to Kaspersky and they said it didn't contain any malware. I'll wait and see what AntiVir say before posting it to the malware listserv.


_________________
Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender.

Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx
Back to top
View users profile Send private message
sparsha

Trooper
Trooper


Joined: Nov 06, 2007
Posts: 31
Location: India

PostPosted: Sun Jan 13, 2008 9:51 am    Post subject:
Reply with quote

Tetak Sunbelt have already Fp this rogue:

More info @
http://research.sunbelt-software.com/threatdisplay.aspx?name=AntiSpyCheck&threatid=192829

Hope this helps you Wink

Back to top
View users profile Send private message
sparsha

Trooper
Trooper


Joined: Nov 06, 2007
Posts: 31
Location: India

PostPosted: Sun Jan 13, 2008 12:56 pm    Post subject:
Reply with quote

also CA and Symantec has them in their def's

http://www.ca.com/securityadvisor/pest/pest.aspx?id=453123105
http://www.symantec.com/business/security_response/writeup.jsp?docid=2008-011112-3720-99&tabid=1

Back to top
View users profile Send private message
tetak

MIRT Team Lead
Premium Member

Joined: Jan 19, 2007
Posts: 5878

MIRT Premium

PostPosted: Sun Jan 13, 2008 6:46 pm    Post subject:
Reply with quote

I e-mailed asc_setup_light.exe to Kaspersky and they said it didn't contain any malware.

However, if you run asc_setup_light.exe then it downloads AntiSpyCheck from 85.255.121.178 and installs it.

I'll add the files it installs like AntiSpyCheck.exe to the malware listserv.


_________________
Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender.

Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Web Malware Links All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer