A forum for reverse engineering, OS internals and malware analysis 

Rogue Antimalware (FakeAV, 2013 year)

Forum for analysis and discussion about malware.
 Topic locked

Re: Rogue Antimalware (FakeAV, 2013 year)

 #19719  by EP_X0FF
 Sat Jun 22, 2013 3:59 am
Win32:Virut wrote:AVASoft Professional Antivirus
http://youtu.be/e_1rj2Q-Bfg
hxxp://www18.zippyshare.com/v/79140735/file.html

It's using ClamAV engine, and really detecting threats, but it's suspicious, (it's using very simillar interface to Winwebsec fakeavs)
It is common chameleon strategy of fakeAV, sometimes they really virusscan... for windows 9x malware.

Re: Rogue Antimalware (FakeAV, 2013 year)

 #19902  by Blaze
 Mon Jul 01, 2013 5:09 pm
Internet Security

it is highly recommended that you activate WinPC Defender to assure that your PC works correctly and has no crashes
Image

MD5: 71e05835e8e839ab0d79fac53935c6f7
Attachments
(798.48 KiB) Downloaded 116 times

Re: Rogue Antimalware (FakeAV, 2013 year)

 #20078  by Win32:Virut
 Sat Jul 13, 2013 9:02 am
8 samples

Antivirus System

Malwarebytes blocked, Chameleon also, HitmanPro (ForceBreach) blocked...
Photos (sorry for bad quality):
https://www.dropbox.com/s/j3xine3dqqqpd ... 095150.jpg
https://www.dropbox.com/s/7zkm681047f12 ... 095206.jpg
https://www.dropbox.com/s/us8n7dkbsa8mf ... 100009.jpg
https://www.dropbox.com/s/kah3oeo9cec4r ... 100048.jpg
Attachments
Password: sclab (sorry for not standard password)
(264.41 KiB) Downloaded 109 times
 Topic locked
  • 1
  • 5
  • 6
  • 7
  • 8
  • 9
  • 15
 Return to “Malware”