1 reply to this topic

[Jaxryley]

hxxp://onlineav-scanner.com/
forces a download of antivirus.v.1.exe which installs a fake security warning and then redirects to download an installer for System Security.

antivirus.v.1.exe isn't being flagged by MBAM but the installer for System Security is being flagged.
hxxp://fast-download-base-free.com/antivirus.v.1.0.0.exe

Quote

File antivirus.v.1.exe received on 12.29.2008 23:38:35 (CET)
Current status: finished
Result: 1/39 (2.56%)

Virus Total

[TakedownMalware]

Jaxryley, on Dec 29 2008, 11:49 PM, said:

hxxp://onlineav-scanner.com/
forces a download of antivirus.v.1.exe which installs a fake security warning and then redirects to download an installer for System Security.

antivirus.v.1.exe isn't being flagged by MBAM but the installer for System Security is being flagged.
hxxp://fast-download-base-free.com/antivirus.v.1.0.0.exe

Virus Total

Looking at the Virustotal Analysis, it sure does a lot of work with the registry. Must be an autorun?