Page 19 of 34
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Mon Jun 27, 2011 6:06 pm
by Xylitol
Unpacked Personnal Shield Pro
This sample is used in test apparently on the BestAV affil (yeah, i've again access to the shit)
I guess usual kernelmode lurkers will give the sample to mbam :mrgreen:

Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Tue Jun 28, 2011 2:37 am
by EP_X0FF
In addition to new Xylitol blog post
http://xylibox.blogspot.com/2011/06/tra ... evera.html there is dedicated resource about Security Shield crap administrated by Severa himself (he is ex script-kiddie carder and spammer, claims to be in business since 1999) Peter Severa which occupation (surprise) is "security".
hxxp://vulnes.com/showthread.php?t=1452
Welcome partners!
All payments done until 22 june.
We have good convert - 400-800$ from 1k loads
Satisfied partner, small 20Kb loader, good payments.

Windows Inviolability System
PostPosted:Wed Jun 29, 2011 11:33 am
by bitx
Windows Inviolability System

Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Wed Jun 29, 2011 11:46 am
by kmd
hxxp://vulnes.com/showthread.php?t=1452&page=3
В связи с текущими событиями временно и планово прекращаю работу по АВ, последние текущие выплаты уйдут на днях, о возобновлении работы сообщу в своих топиках, один из которых вы сейчас читаете, благодарю за понимание.
is he already pissed in his pants? :D
Windows Proofness Guarantor
PostPosted:Thu Jun 30, 2011 12:25 pm
by bitx
Windows Proofness Guarantor

Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Thu Jun 30, 2011 12:30 pm
by bitx
kmd wrote:hxxp://vulnes.com/showthread.php?t=1452&page=3
В связи с текущими событиями временно и планово прекращаю работу по АВ, последние текущие выплаты уйдут на днях, о возобновлении работы сообщу в своих топиках, один из которых вы сейчас читаете, благодарю за понимание.
is he already pissed in his pants? :D
Probably not :) summer + a lot of money = brilliant holidays
Fast Antivirus 2011
PostPosted:Thu Jun 30, 2011 4:52 pm
by rough_spear
Fast Antivirus 2011
FILE NAME - FastAntivirus2011.zip
password - malware
Regards,
rough_spear.
Spyware Quake
PostPosted:Sat Jul 02, 2011 8:25 am
by Maxstar
Spyware Quake
http://www.virustotal.com/file-scan/rep ... 1304739923
MD5 : 7e56ea2ba66f0ba2db6591c428923872
Result: 36 /42 (85.7%)
Windows Microsoft Guardian
PostPosted:Sat Jul 02, 2011 8:34 am
by Maxstar
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Jul 02, 2011 4:50 pm
by kmd
tango down :))
scriptkiddie vulnes.com down
Peter Severa or his real life name Peter Levashov is well known spammer in the past (world spam king rank #6 in 2008), malware/spam programs developer, who escaped arrest (Alan Ralsky case) and now rules fake av bussiness.
http://www.spamhaus.org/rokso/evidence. ... id=ROK4035
latest FBI actions likely making his holidays not so brilliant as he planned