89
vote
One more rogue application, called Antispyware Pro XP, is out in the wild. The fake online scanner at http://scan.antispyware-free-scanner.com/ looks like this:
It pushes an installer that is hosted at http://files.as-pro-xp-download.com/. This installer downloads the actual rogue application executable.
And, finally the rogue application looks like this!
Detections for the installer and rogue executable are not very good at this moment. VirusTotal scan results of the installer and rogue application executable can be found here and here respectively.
Bookmark/Search this post with:
Trackback URL for this post:
http://www.secgeeks.com/trackback/2359
