We detected a new XP Antivirus 2008 rogue security software site branded as “MS Antivirus 2008″. The file, MSASetup.exe comes from hxxp://msantivirusxp.com/install.php and is undetected by most AV vendors at the moment.
File: MSASetup.exe
File size: 1037918 bytes
MD5…: 1f58d870738aaebb12ed7ece90781c6a
SHA1..: d8f030275b571dea6b8836f433e933cc5e6a1834
MDB: /lithium-malware/MSASetup.zip
We also detected other new sites pushing out rogue anti-malware product.
Site:http://antivirus-purchasing.com/
Distributes: Antivirus 09
File: None yet
Site:http://antivirusfreescan2009.com/
Distributes: Antivirus 09
File: AV2009Install_.exe
DL Link: hxxp://antivirusfreescan2009.com/2009/download/trial/AV2009Install_*.exe
I got landed with this crap last night came from nowhere while I was playing patients. Next thing I know this add for “MS Antivirus XP 2008″ poped up and I spent all night trying to get rid of it. In theend I’ve had to reformat, Boy am I F***** off with it.
FF