Page 17 of 46
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Fri Apr 27, 2012 2:13 am
by thisisu
Windows Premium Guard
FakeVimes - MD5: 1dbac849d825a2174e4cf80a863715ad - diff icon
https://www.virustotal.com/file/f8a8fd1 ... /analysis/
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 12:42 am
by thisisu
Windows Safety Checkpoint
FakeVimes - MD5: 329c833f9e3c05bf642647780daa33ca
https://www.virustotal.com/file/b7db6e4 ... 335573657/
Note: Largest filesize rogue in FakeVimes to date. Despite the aforementioned, this does not appear to be "installer" version. Protector-????.exe and "installer" are same MD5.
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 1:50 am
by thisisu
Smart Fortress 2012
Winwebsec - MD5: 22591633302c18a6db719b15f0d31d7f
https://www.virustotal.com/file/0b32b2a ... /analysis/
AppCertDlls
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 6:24 am
by thisisu
Windows Safety Checkpoint
FakeVimes - MD5: 2523c3818d9a40397d148d5e65db3db5
https://www.virustotal.com/file/c8c5505 ... /analysis/
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 7:41 am
by rough_spear
Hi All, :D
Here is another sample of Windows Safety Checkpoint.
web url 1 - hxxp://initialtube.in/hot/Flash_Player_v11.2_for_Windows.exe
web url 2 - hxxp://tubeoclock.in/hot/xxxvideo.avi.exe
VT link -
https://www.virustotal.com/file/b7db6e4 ... /analysis/
MD5 - 329c833f9e3c05bf642647780daa33ca
Regards,
rough_spear. ;)
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 12:27 pm
by rough_spear
Hi All, :D
Security Shield
VT link -
https://www.virustotal.com/file/63f40e7 ... /analysis/
MD5 - 6b0d5217aef84807b039ddf5443e1954
Regards,
rough_spear. ;)
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 12:32 pm
by rough_spear
Hi All, :D
Another
Security Shield. :evil:
VT link -
https://www.virustotal.com/file/ef0716f ... /analysis/
MD5 - b24c180ee53756219885acfd1f8d4d50
Regards,
rough _spear. ;)
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sat Apr 28, 2012 2:09 pm
by EP_X0FF
As you can see from VT link, this sample was already posted here few months ago
http://www.kernelmode.info/forum/viewto ... 370#p10678
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Apr 29, 2012 4:02 pm
by rough_spear
Search the forum using md5 but didn't find matching so posted the sample. :o
EP_X0FF wrote:As you can see from VT link, this sample was already posted here few months ago
http://www.kernelmode.info/forum/viewto ... 370#p10678
anyway thanks for info.
Regards,
rough_spear.
Re: Rogue antimalware (FakeAV, FakeAlert)
PostPosted:Sun Apr 29, 2012 7:29 pm
by thisisu
Windows Recovery Series
FakeVimes - MD5: a35a060f0c025468063be37ded306aa3
https://www.virustotal.com/file/a3cca31 ... /analysis/