We found an undetected Antivirus 2009 (2/36 suspicious on VirusTotal) on the loose @ main-scanner.com.
*UPDATE* AV vendors are adding it to their signature files since we last reported. The last scan on VirusTotal shows 12/36 detections.
Site: hxxp://main-scanner.com/2009/9/freescan.php?aid=77052104
File: AV2009Install_77052104.exe
File size: 159744 bytes
MD5…: 3e5d5212cbf4c4a7618380fda37653ea
SHA1..: 7e190afa74a680089d9228f602d37ef765d0f24e
SHA256: 47fd1a4df52ebbf07658a2f1fb9707df817eb5ac93f97e322fa7b6a55758300e









Advanced Antivirus planted a pop up saying “WARNING!Attack Detected”with an “activate now” botton and a “leave unprotected” button you can either buy their program or get a repeat pop up everty 3 minutes .. for life! as I cant seen to be able to get rid of it
Yes you can, stop using windows.
Hehe…
The neat pop-up appie can be found in the registry under Run
or “msconfig” under Startup
I’m curious where I can get my hands on a copy of Antivirus 2009. It sounds like an interesting program. main-scanner.com does not appear to exist.