[dumb110]

Live Security Platinum.

When u select it you get to see a new icon. ;)

[Blaze]

Live Security Platinum

[EP_X0FF]

System Progressive Protection

VirusTotal
https://www.virustotal.com/file/626e918 ... /analysis/

Main window with embedded detections.



Security status.



Purchase form.



Uses usual autorun reg entry. Terminates running GUI programs with fake alert messages. Another reincarnation of the Security Shield. Thanks for sample to markusg.

[Win32:Virut]

Thanks

One more sample:

[markusg]

Winwebsec
https://www.virustotal.com/file/c587473 ... 348595853/

[rough_spear]

Hi All, :D

Windows Security 2012

With Necurs Rootkit.

Web Links -
hxxp://scan-av-fis.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO11QWjkoL4jZPxOUaKMDkhQ==

hxxp://winsecsys6.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO1wcUi0le4mQcw lMfsTkhQ==

hxxp://great-antispy2012.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO11oT30sOsTccyupJI5PkhQ==

Above url carry same file.
Attached file includes rootkit driver and dropper and sandboxie BSA reports.

Regards,

rough_spear. ;)

[gied]

Do the rogue produces visible screen for anyone? Or is it VM-protected?

Hi All, :D

Windows Security 2012

With Necurs Rootkit.

Web Links -
hxxp://scan-av-fis.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO11QWjkoL4jZPxOUaKMDkhQ==

hxxp://winsecsys6.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO1wcUi0le4mQcw lMfsTkhQ==

hxxp://great-antispy2012.com/?c=RaEMLDkYzTQrhIQYxO3aByW/zb7zW2GSiNy 2HVZf8nAl VQznWWinHO11oT30sOsTccyupJI5PkhQ==

Above url carry same file.
Attached file includes rootkit driver and dropper and sandboxie BSA reports.

Regards,

rough_spear. ;)

[Cody Johnston]

XP Defender 2013



Low detection on VT: 2/42

https://www.virustotal.com/file/910e1f4 ... /analysis/

MD5: d016624eda407bce8982b029631e7ec8

[Win32:Virut]

Key:

Code: Select all

3425-814615-3990

[frame4-mdpro]

Key:

Code: Select all

3425-814615-3990

Is this for the XP Defender 2013 ?