Author Topic: Rebranded Rogue Anti-Virus Strikes Again  (Read 607 times)

0 Members and 1 Guest are viewing this topic.

September 30, 2009, 08:42:37 am
Read 607 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3312
http://www.avertlabs.com/research/blog/index.php/2009/09/30/rebranded-rogue-anti-virus-strikes-again/

Quote
Recently, we analysed samples of a new fake anti-virus program that brands itself as “Alpha Antivirus”. This program uses the following filenames: alphaav.exe and msnaoladdon.dll.

“Alpha Antivirus” is a new FakeAlert variant evolved from the “Personal Antivirus” family of rogue anti-virus software. Like many FakeAlert malware, “Alpha Antivirus” promotes itself through the use of pop-up web pages hosted on malicious websites. These web pages mimics a “Windows Explorer” folder and a “Windows Security Alert” dialog,  and performs a free but fake online scanning of the affected system.
Ruining the bad guy's day

September 30, 2009, 12:52:36 pm
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1683
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Rofl, several of us identified this "new" one a couple weeks or several ago ....
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net