[Win32:Virut]

Windows Prime Booster

[hx1997]

Smart Guard Protection - Malware Security Suite

looooool

捕获3.png (86.77 KiB) Viewed 889 times

[Win32:Virut]

Windows Prime Shield

[hx1997]

Windows Prime Shield

VT 1 / 47
https://www.virustotal.com/en/file/9275 ... 389954409/

捕获3.png (87.61 KiB) Viewed 809 times

[Win32:Virut]

Code: Select all

hxxp://zhnskks.servehttp.com/index.php?c=RaENOjEayDF925cOxP3ACC60zajgAjCTlcK0liAaKtvJheVQzm+YhzfWz1MPnw1S6zBdyf5Nf5Siz6QlCgCm4K+ByoM=

Empty file for me :(

[Win32:Virut]

[dairu87]

Found this on a customer's machine today. Same old variant still using svc-Random.exe. they are really changing the name on these guys a lot this time around

[Windows]

2 Samples of Windows Safety Master

install.exe-VT:https://www.virustotal.com/en/file/b7a7 ... 391307981/

svc-wtis.exe-VT:https://www.virustotal.com/en/file/2c2d ... 391308047/

[dairu87]

Another one of the Windows FakeAV, still using the same components... just changing up the name. Looks like a lot of this is coming from those fake Microsoft Security Essentials pop-ups, at least for the people I have talked to.

[dairu87]

More samples with VT results
https://www.virustotal.com/en/file/164c ... /analysis/
https://www.virustotal.com/en/file/f2cd ... /analysis/