Author Topic: for potential listing  (Read 3791 times)

0 Members and 1 Guest are viewing this topic.

October 15, 2009, 08:53:23 pm
Read 3791 times


  • Sr. Member

  • Offline
  • ****

  • 179
Might just fall under "crapware", but has created trojan signatures for this thing (2009998 - ET TROJAN Smilebox Spyware Download (emerging-malware.rules)).
VirusTotal is 0/41 for this binary.

Some funny stuff in the ThreatExpert output though, after installation it does a get against this url:

Which only contains:
Code: [Select]
Smilebox rocks your world.
URL's that get hit during install:;src=2021596;type=smile984;cat=ambie953;ord=1?;src=2021596;type=smile984;cat=ambie953;ord=1?&_dc_ck=try

More threatexpert stuff here: