'1969 Rybovich' Madoff's Yacht - Search Leads to Fake Anti-Virus and Malware

Discussion in 'malware problems & news' started by PROROOTECT, May 28, 2009.

Thread Status:
Not open for further replies.
  1. PROROOTECT

    PROROOTECT Registered Member

    Joined:
    May 5, 2008
    Posts:
    1,102
    Location:
    HERE ...Fort Lee, NJ
  2. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    From the blog:

    From the example the blog shows -- a typical rogue antivirus fake scan -- anyone who has properly configured the browser for scripting won't see anything but a blank page:

    [​IMG]

    This is because the elements of the fake scanning are loaded by javascript files. Typically:

    Code:
    script src='fileslist.js'>/script
    script src='progressbar2.js?v=1.1'>/script
    script src='common.js'>/script
    
    For a research blog, not much research was done.

    ----
    rich
     
Loading...
Thread Status:
Not open for further replies.