Attached.
Attachments
(495.78 KiB) Downloaded 111 times
A forum for reverse engineering, OS internals and malware analysis
That's FakeAV.
12.png (117.72 KiB) Viewed 767 times
Moved.
Ring0 - the source of inspiration
System Care Antivirus
hххp://systemcare-antivirus.org/
hххp://systemcare-antivirus.org/
Attachments
pass: infected
(389.66 KiB) Downloaded 165 times
(389.66 KiB) Downloaded 165 times
Just wondering, whatever happened to the samples of http://siri-urz.blogspot.sg/2011/03/win ... ystem.html series of FakeAVs? :shock:
To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.
XP Security Cleaner Pro
Attachments
pass:infected
(194.64 KiB) Downloaded 111 times
(194.64 KiB) Downloaded 111 times
unpacked version of ISergey256.
xwxproductions wrote:Just wondering, whatever happened to the samples of http://siri-urz.blogspot.sg/2011/03/win ... ystem.html series of FakeAVs? :shock:no idea but he's still active on twitter.
Attachments
infected
(806.78 KiB) Downloaded 97 times
(806.78 KiB) Downloaded 97 times
Just tested Windows Security&Control, and realised that all its sites are down. I wonder what the serial key is. No one has ever provided one, except for the patch of Windows Problems Protector.
UPDATE: AVASoft (tech-ava-soft.org) and System Care Antivirus (systemcare-antivirus.org) sites brought down
UPDATE: AVASoft (tech-ava-soft.org) and System Care Antivirus (systemcare-antivirus.org) sites brought down
To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.
Hi All,
Another sample of "System Care Antivirus" Fake AV...
Following is VT link:
https://www.virustotal.com/en/file/14ff ... /analysis/
Another sample of "System Care Antivirus" Fake AV...
Following is VT link:
https://www.virustotal.com/en/file/14ff ... /analysis/
Attachments
Pass: infected
(819.92 KiB) Downloaded 105 times
(819.92 KiB) Downloaded 105 times
Hello,
Here's another "Windows ____ Security Center Pro" NameChanger // FakeRean
MD5: 70a4bbf9e36cf11142154030969d22a1 - VirusTotal
Here's another "Windows ____ Security Center Pro" NameChanger // FakeRean
MD5: 70a4bbf9e36cf11142154030969d22a1 - VirusTotal
Attachments
pass: infected
(237.66 KiB) Downloaded 120 times
(237.66 KiB) Downloaded 120 times
