Today we found a new site distributing WinSpywareProtect. The URL in question is hxxp://antivirus777.com which is redirecting to a recently created domain hxxp://antivir-online-scan.com/. Once on the site it will “run” a scan on your computer and it will proceed to tell you that it found malware and adult material. The file antivirus.v.1.0.exe only has a 5/36 detection ratio at VirusTotal at the time of the post so be careful!
1 Response to “WinSpywareProtect (antivirus.v.1.0.exe)”
Malware Database Forum
Search
Recent Posts
- Fake antivirus site features drive-by install of PDF exploits
- More mailing list unsubscription phishing websites
- New fake security software called Micro Antivirus 2008
- Antivirus 2009
- Fake Activation and Mailing List Unsubscribe Websites
- Database Update - 19 Files (Low Detection)
- Database Update - 16 Files (Low-Moderate Detection)
- EstDomains shut down effective November 24th, 2008
- Database Update - 13 Files (Low-Moderate Detection)
- Fake control panel app installing multiple malware binaries
Tag Cloud
2009 Antivirus 2008 Antivirus 2009 Antivirus Advance Antivirus Pro 2009 Antivirus XP 08 Antivirus XP 2008 Database Update DOTM E-mail eAntivirusPro Fake YouTube Java Malicious Domains Malicious Links malicious scripts MalSpam Malware malware database Malware Removal Motigo MS Antivirus msn New Member Phishing Plimus Rogue Rogue Anti-Malware Rogue Security Software Rogue Software scripts search page Smart Antivirus 2009 Social Engineering Spam System Cleaner and Hardware Doctor Twitter Video Vulnerabilities watch.exe Web Spy Shield WinSpywareProtect XP AntiSpyware 2009 xp antivirus XP Antivirus 2008Blogroll
- 0×000000
- ADD / XOR / ROL
- Dancho Danchev
- Ero Carrera
- errata security
- F-Secure Weblog
- h4k.com
- Information Security Short Takes
- Kansas University
- Malware Database Forum
- Malware Domain List
- Matasano
- McAfee Avert Labs Blog
- MCW Research
- Midnight Research Labs
- n0where.org
- Nate McFeters
- Offensive Computing
- Panda Research Blog
- PandaLabs Blog
- Prevent Malware
- Raffy Marty
- Sane Security
- Schneier on Security
- securabit
- Security Twits
- Security Uncorked
- Securosis
- Sunbelt Blog
- Tao Security
- Tenable Security
- TrendMicro Blog
- Viruslist
- WebSense Security Labs
- Zero Day (ZDNet)
Categories
- Advanced Antivirus
- Antispyware 2008
- Antivirus 2008
- Antivirus 2009
- Antivirus Advance
- Antivirus Pro 2009
- Antivirus Security
- Antivirus VIP
- Antivirus XP 2008
- AntivirusPro
- Automation
- CNN
- Codec
- Constructor
- Database Update
- Database Updates
- Doctor AV
- DOTM
- Download.com
- e-card
- eAntivirusPro
- FAQ
- Gmail
- IFRAME
- Infection
- Internet Antivirus
- Investigated
- Lloyds TSB
- LOTD
- Low Detection
- Malicious Domains
- Malicious Links
- MalSpam
- Malware
- Malware Codec
- Malware Distribution
- Malware Removal
- MalwareBytes
- Master Antivirus 2009
- Micro Antivirus 2009
- Motigo
- MS Antivirus
- MS Antivirus 2008
- New Member
- ONLINENIC
- Phishing
- Plimus
- Porntube
- Power Antivirus
- Rogue
- Rogue Anti-Malware
- Rogue Security Software
- Rogue Software
- Rogue Threats
- Rootkit
- Shestakov Yuriy
- Smart Antivirus 2009
- Social Engineering
- Spyware Protector
- System Cleaner and Hardware Doctor
- Thoughts
- Total Secure 2009
- Uncategorized
- Video
- Video ActiveX Object
- Vista Antivirus 08
- Vulnerabilities
- Web Spy Shield
- Windows XP Online Anti-Spyware Scanner
- WinSpywareProtect
- Wista Antivirus 2009
- XP AntiSpyware 2009
- xp antivirus










I keep getting this ‘antivirus.v.1.0.exe’ everytime I open with Firefox. I’m now using Windows explorer.
As i know very little about these things i’m not sure what i should do. The message/warning/ad won’t go away until i shut down the computer which doesn’t seem to be a good thing. What do i do now please?