Today we found a new site distributing WinSpywareProtect. The URL in question is hxxp://antivirus777.com which is redirecting to a recently created domain hxxp://antivir-online-scan.com/. Once on the site it will “run” a scan on your computer and it will proceed to tell you that it found malware and adult material. The file antivirus.v.1.0.exe only has a 5/36 detection ratio at VirusTotal at the time of the post so be careful!
1 Response to “WinSpywareProtect (antivirus.v.1.0.exe)”
SANDBOX
SANDBOX ANALYSIS PAGE

SANDBOX ANALYSIS PAGE

Search
Recent Posts
- new rogue domain: desktopsecuritysoft2010.com
- new rogue domain: makeptotect73.co.cc
- new rogue domain: pcsecurityshield.com
- new rogue domain: antivirmore.com
- new rogue domain: oksave9.co.cc
- new rogue domain: antivirus-elite.com
- Introducing: Roguevertising
- new rogue domain: fastcleancure47pd.co.cc
- Robint.us SQLi Utilizing CVE-2010-1297 Exploit
- new rogue domains for Antivirus Soft
Categories
Archives
Blogroll
- 0×000000
- ADD / XOR / ROL
- Dancho Danchev
- Ero Carrera
- errata security
- F-Secure Weblog
- h4k.com
- Information Security Short Takes
- Kansas University
- Malware Database Forum
- Malware Domain List
- Matasano
- McAfee Avert Labs Blog
- MCW Research
- Midnight Research Labs
- n0where.org
- Nate McFeters
- Offensive Computing
- Panda Research Blog
- PandaLabs Blog
- Prevent Malware
- Raffy Marty
- Sane Security
- Schneier on Security
- securabit
- Security Twits
- Security Uncorked
- Securosis
- Sunbelt Blog
- Tao Security
- Tenable Security
- TrendMicro Blog
- Viruslist
- WebSense Security Labs
- Zero Day (ZDNet)

I keep getting this ‘antivirus.v.1.0.exe’ everytime I open with Firefox. I’m now using Windows explorer.
As i know very little about these things i’m not sure what i should do. The message/warning/ad won’t go away until i shut down the computer which doesn’t seem to be a good thing. What do i do now please?