AntivirusStudioware2010 - Test

Discussion in 'malware problems & news' started by CloneRanger, Nov 7, 2010.

Thread Status:
Not open for further replies.
  1. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    Re AntivirusStudioware2010 - https://www.wilderssecurity.com/showthread.php?p=1780493#post1780493

    *

    Enabled SD & installed it. Tried to set a Registry autostart entry which i didn't bother allowing. PG & PEG popped up various alerts which i allowed. It tried to call out to update which i blocked for now.

    1.gif

    That's funny, i though it was AntivirusStudioware2010 :D

    2.gif

    3.gif

    4.gif

    Quick scan took around 5 minutes in which time my comp became very slow to respond to other things i was doing & then this ?

    5.gif

    What a surprise :D

    MORE
     
  2. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    Tried to update & got a female voice saying i needed to get a licence :D plus this

    key.gif

    Clicked Get Licence & very slowly, about 30 seconds, this page appeared

    buy.gif

    ?

    Looked at the FW & saw these IP's

    ip.gif

    Strange !

    172.174.183.130 = AOL Wonder what that's for ?

    I was able to exit the program & nothing running in TM afterwards.

    Rebooted & back to normal

    I can't explain why it didn't show me ANY fake malware finds to try & trick into buying ?

    Wierd !
     
  3. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Hmmm, seems that "Security Inspector 2010" is a new GUI coming from the download site.

    securetystudio.exe - 12/43 (27.9%)

    MBAM does seem to take it out.

    Nice find CloneRanger. :)
     
  4. Baserk

    Baserk Registered Member

    Joined:
    Apr 14, 2008
    Posts:
    1,317
    Location:
    AmstelodamUM
    Interesting variation.
    With average users getting warned about fake AV's, showing the usual laundry list of infections, this one looks benevolent.
    Foul but creative. Nice find indeed.
     
Thread Status:
Not open for further replies.