Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Dec 04, 2011 12:30 pm
VirusKorean
KernelMode.info
A forum for reverse engineering, OS internals and malware analysis
https://www.kernelmode.info/forum/
Rogue Antimalware (FakeAV, 2011 year)
Page 30 of 34
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Dec 04, 2011 12:32 pm
DataSave
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Dec 04, 2011 12:33 pm
SweeperLab
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Dec 04, 2011 8:47 pm
Striker wrote:DataSaveThis looks like Kobayashi´s post at VX Heaven´s forum but without the analysis reports made with Buster Sandbox Analyzer.
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Dec 04, 2011 8:51 pm
Buster_BSA wrote:right. i took that screen from his postStriker wrote:DataSaveThis looks like Kobayashi´s post at VX Heaven´s forum but without the analysis reports made with Buster Sandbox Analyzer.
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Mon Dec 05, 2011 7:53 pm
hxxp://elementalbiller.com/modules/mod_wdbanners/blog.php?how128.jpg
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Tue Dec 06, 2011 12:58 am
markusg wrote:hxxp://elementalbiller.com/modules/mod_wdbanners/blog.php?how128.jpgInstaller for XP Antivirus 2012
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
braviax shit -> http://xylibox.blogspot.com/2011/12/braviax.html
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Tue Dec 06, 2011 3:31 am
VClean_Setup.exe not working:
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Info:
Administrator:
Name:(Tyson Larocque)
Email:() tel-- +1.6046454230
Fax:(+1.6046454230)
Tyson Larocque
2321 Robson St
Vancouver BC, CA V6B 3K9
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Info:
Administrator:
Name:(Tyson Larocque)
Email:() tel-- +1.6046454230
Fax:(+1.6046454230)
Tyson Larocque
2321 Robson St
Vancouver BC, CA V6B 3K9
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Tue Dec 06, 2011 6:27 am
xwxproductions wrote:VClean_Setup.exe not working:it works fine. try this one
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Wed Dec 07, 2011 12:40 am
Striker wrote:Same error :(xwxproductions wrote:VClean_Setup.exe not working:it works fine. try this one
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Maybe it's the OS I'm using. (Windows Developers Preview)