Wednesday, July 18, 2007

WinAntiSpyware2007

Many people are downloading this application after being duped by popup's that say the user is infected.
Once the application is downloaded, it runs a "spyware" scan which appears legitimate, however if you watch closely it flags things which don't actually exist. I ran this program on a new image of Windows XP Home . Before running the installer, this image had never been connected to the internet.


(DISOG Photo, Windows XP Home SP1)



This program doesn't appear to actually do anything malicious. Rather, it plays on the ignorance of users by confusing them into thinking they are infected.

For Spyware and Adware protection, we recommend Spybot S&D and LavaSoft's Ad-aware.

(b50add21bda401cc1d028241da0d6605) WinAntiVirusPro2007Install.exe infected: Trojan.Downloader.TY
Downloads: http://download.cdn. winsoftware.com/ files/WinAntiSpyware2007FreeSetup.exe (e0361f7ef2ea36257f9a894f8accb984)

Watch for connections to *.winsoftware.com. and *.winantispyware.com

PS, for those of you who still run as administrator.....

Labels: ,