Yet another Rogue Security application from SpyLocked group of Rogue security application.
VirProtect is the latest entry to the list; This Rogue is currently advertised by the latest Zlob Trojan. The site uses the IP 18.104.22.168 which is also used by virusray.com (Previous rogue security application released from this group)
Screenshot of the application.
Detection of the rogue is poor.
VirusTotal Scan Result: 7/31 (22.59%)
Avast 4.7.1074.0 2007.11.13 Win32:Spycrush-B
BitDefender 7.2 2007.11.13 Adware.SpyLocked.C
Ikarus T22.214.171.124 2007.11.13 Virus.Win32.Spycrush.B
Kaspersky 126.96.36.199 2007.11.13 not-a-virus:FraudTool.Win32.VirusProtectPro.h
Microsoft 1.3007 2007.11.12 Program:Win32/VirusLocker
Rising 20.18.11.00 2007.11.13 Hack.Win32.VirusProtectPro.a
VBA32 188.8.131.52 2007.11.11 Application.Win32.Adware.VirusProtectPro
Avoid it at all cost…
Bharath M N