win32 | DataProtectionCenter.com

FakeScanti Rogue Hijacks HOSTS Files

29

Nov

2011

Patrick, our resident rogue AV expert from the AV Labs, have his eyes set on one particular family-FakeScanti. This rogue family first appeared in the first quarter of 2010, and it has been within the radar ever since. Enter AV Protection 2011. This particular rogue is the latest variant in a handful of noteworthy rogues […]

Category General Written by GFI Labs blog 0 Comments

Win32/Duqu analysis: the RPC edition

29

Oct

2011

My Russian colleagues Aleksandr Matrosov and Eugene Rodionov have found some time to do some more analysis on Win32/Duqu. (Don’t you guys sleep?) In the previous post (http://blog.eset.com/2011/10/25/win32duqu-it%e2%80%99s-a-date) they concentrated on analyzing the Duqu configuration file format and extracting the exact date on which the system was infected. This time they investigated Duqu’s RPC (Remote […]

Category General Written by ESET ThreatBlog 0 Comments

Fake AV business alive and kicking

27

Oct

2011

Since June 2011 we have seen a substantial decrease in the number of fake antivirus programs. Right now we are observing 10 000 daily attempts to infect users with Trojan-FakeAV; back in June the figures were 50-60,000. The daily number of attempted infections using Trojan-FakeAV in the past 5 months Nevertheless, new versions of this […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘win32’

FakeScanti Rogue Hijacks HOSTS Files

Win32/Duqu analysis: the RPC edition

Fake AV business alive and kicking

Categories

Featured

Archives

Latest Comments

About Us

Contact Us