Today we found a new site distributing WinSpywareProtect. The URL in question is hxxp://antivirus777.com which is redirecting to a recently created domain hxxp://antivir-online-scan.com/. Once on the site it will “run” a scan on your computer and it will proceed to tell you that it found malware and adult material. The file antivirus.v.1.0.exe only has a 5/36 detection ratio at VirusTotal at the time of the post so be careful!
1 Response to “WinSpywareProtect (antivirus.v.1.0.exe)”

Search
Recent Posts
- Demonstrating the latest IE vulnerability
- New rogue domain: personalonlinescanv3.com
- New malware domain: hotexefiles.com
- New malware domain: exe-cosmos.com
- Database Update: 29 files (Low/Moderate Detection)
- New malware domain: red-exe.com
- Rogue domain: securedvirusscan.com
- Multiple domains targeting pornographic videos distributing malware codec
- New malware domain: exe-site.com
- Website selling multiple rogue programs as legitimate-Pt. 2
Categories
Archives
Blogroll
- 0×000000
- ADD / XOR / ROL
- Dancho Danchev
- Ero Carrera
- errata security
- F-Secure Weblog
- h4k.com
- Information Security Short Takes
- Kansas University
- Malware Database Forum
- Malware Domain List
- Matasano
- McAfee Avert Labs Blog
- MCW Research
- Midnight Research Labs
- n0where.org
- Nate McFeters
- Offensive Computing
- Panda Research Blog
- PandaLabs Blog
- Prevent Malware
- Raffy Marty
- Sane Security
- Schneier on Security
- securabit
- Security Twits
- Security Uncorked
- Securosis
- Sunbelt Blog
- Tao Security
- Tenable Security
- TrendMicro Blog
- Viruslist
- WebSense Security Labs
- Zero Day (ZDNet)

I keep getting this ‘antivirus.v.1.0.exe’ everytime I open with Firefox. I’m now using Windows explorer.
As i know very little about these things i’m not sure what i should do. The message/warning/ad won’t go away until i shut down the computer which doesn’t seem to be a good thing. What do i do now please?