1 reply to this topic

[Jaxryley]

Quote

Today we found a new site distributing the rogue anti-malware software, Wista Antivirus 2009. The file downloaded at the website (setup_en.exe (575953F4912EA2B9FF2598D0EE561828) currently shows zero detection over at VirusTotal.

If we click on the “Free Scan” we are redirected to fake scan page and the removal file provided points to “Spyware Isolator”, which is detected by most AV’s.
Malware Database

http://www.virustotal.com/analisis/cfcb356...9140887c907ad05

hxxp://wista-antivirus2009.com

[nosirrah]

These morph so often that it is hard to keep up with the installers (step 1) .

That being said we have backup that stops these on step 2 (install step) so that step 3 (final functioning fallout) never takes place . As long as you can kill step 1 or step 2 these rogues are not a problem .

Within the next few versions we will have IP blocking and the vast majority of rogues (even ones that have yet to be created) will be proactively blocked .