Tuesday, November 27, 2007

Yet another bunch of Rogue Security applications

Yet another bunch of Rogue Security applications


Currently there are four websites distributing clone of SpySheriff Rogue Security application. All the domains share the same IP address 58.65.238.130

Dr-protection.com



Application Screen Shot of Dr-protection


Guard-center.com

Application Screen Shot of Guard-center


Liveantispy.com



Application Screen Shot of Liveantispy



Online-guard.net

Application Screen Shot of Online-guard



Virus total Scan Results:

AhnLab-V3 2007.11.27.1 2007.11.27 Win-Trojan/Spyshield.51200
Kaspersky 7.0.0.125 2007.11.27 not-a-virus:FraudTool.Win32.SpySheriff.f
VirusBuster 4.3.26:9 2007.11.26 Adware.SpySherif.Gen.2

Detection of these Rogue security applications are poor, Stay away from these sites.

Bharath M N

blog comments powered by Disqus