New Fake AV Scam

After executing the exploit nothing seems to happen till you try to open your browser or Task Manager then a fake Microsoft Security Essentials Alert pops up stating you are infected.

On hitting Clean Computer then Scan Online another fake scan dialogue comes up where you have a choice of five different rogue AV's to choose from to download which are nearly all the same with different skins.

antispy.exe - 1 /42 (2.4%) - 2010-08-24

 

Nice of them to offer a choice What will they think of next

 

Just as hilarious, note the ones with "Scan result" found trojan or rootkit and are Free install no name brand programs

 

Hey Franklin,

could you kindly zip and mail the rogue file "password-infected" to subratam AT subratam DOT com

thanks,
Sub

 

You will find a complete removal guide for this new rogue here prior to proceeding you should request the assistance of a security expert at said Forum.

Adding thread from ESET Forum to tie these two together for continuity.

Thanks.

 

HAHA Red Cross Antivirus

 

A detailed analysis and further research on the rogue http://blog.emsisoft.com/2010/08/29/security-essentials-not/

 

I dont get it..if this is malware then whats the point of getting the user to download another malware? Why cant the original malware do the bad stuff itself?

 

Of many possible reasons one can be to increase the impression of "genuineness" . The whole process when happens "through" the user ( even though it has loopholes), makes the process "believable" to download something intentionally. Rather than something suddenly they see in their system without prior knowledge. Think social engineering.

 

Interesting!! Thanks!

 

Don't Microsoft now technically have a reason to use the law against these guys? Copyright/patent issues etc, they've copied the name directly.

 

It's nice to see Emsi Blogging Rogues and such, Sub, though I think we've got things covered, unless I'm missing something

 

and MSE GUI

 

From Rogue:MSIL/Zeven wants a piece of the Microsoft Security Essentials pie:

 

The ingenuity of these malware guys is boundless