A forum for reverse engineering, OS internals and malware analysis 

Rogue Antimalware (FakeAV, 2012 year)

Forum for analysis and discussion about malware.
 Topic locked

Re: Rogue antimalware (FakeAV, FakeAlert)

 #16477  by Xylitol
 Tue Nov 06, 2012 11:55 pm
Hmm PC Defender Plus...
Code: Select all
authenticatesyahoostyle.info - 91.242.217.86
spoilsdecelerators.biz - 91.242.217.85
secure.9billing.com - 91.242.217.24
---
Micorsoft Essential Security Pro 2013
https://www.virustotal.com/file/275952e ... 352246161/
Image
Attachments
infected
(408.81 KiB) Downloaded 116 times

Re: Rogue antimalware (FakeAV, FakeAlert)

 #16540  by rough_spear
 Sat Nov 10, 2012 11:58 am
Hi All, :D

Here is Security Shield

File - 333bLnL1H4KaHc.exe

SHA256: c2509fc10445890764f58aa059e116782b7640d51e40ad897789ca7b32b21cba
SHA1: cca76665dffb26b8ad853ba3b439df83fcd0c756
MD5: 00ed599479522b9011426aafc9f1a477

VT link - https://www.virustotal.com/file/c2509fc ... /analysis/

File - 01e04111.exe

SHA256: 0033ba8fa5f9b9b7a836f6d5c80c8ce33f25ea46df13d354faa5363451dde208
SHA1: 8fb2d282a42d6ea1dea62c06f38bbf2917f320a6
MD5: 9bd999f604badc0ae9bc74e26904515d

VT link - https://www.virustotal.com/file/0033ba8 ... 352548486/

Regards,

rough_spear. ;)
Attachments
password - infected.
(631.54 KiB) Downloaded 98 times

Re: Rogue antimalware (FakeAV, FakeAlert)

 #16596  by Win32:Virut
 Tue Nov 13, 2012 5:52 pm
Hello,

another 2 samples of XP/Vista/Win 7 Antispyware/Antivirus Pro 2013

File attached.

Image
Password is "infected" without quotes
(231.6 KiB) Downloaded 78 times
EDIT:

5 another samples
Password is "infected" without quotes
(233.87 KiB) Downloaded 83 times
Last edited by Win32:Virut on Tue Nov 13, 2012 8:26 pm, edited 1 time in total.

Rogue:Win32/FakeRean

 #16752  by Win32:Virut
 Wed Nov 21, 2012 4:53 pm
SHA256: 38c014ba6e85caf7bc8be0922dd8f34380a45a964e9fab1c3678a97dbe65afcb
SHA1: 0a1203793e77122e4f208f920a42188f84bf74ed
MD5: 80398049ce39ae416e2f3a14f5022082
File size: 235.8 KB ( 241503 bytes )
File name: nyw.exe
File type: Win32 EXE
Tags: peexe
Detection ratio: 27 / 43
Analysis date: 2012-11-21 13:43:55 UTC ( 3 godziny, 4 minuty ago )
https://www.virustotal.com/file/38c014b ... /analysis/

Thanks in advance.
 Topic locked
  • 1
  • 42
  • 43
  • 44
  • 45
  • 46
 Return to “Malware”