Jump to content


Photo

AntiVirGear.com : New Rogue Anti-Spyware


  • Please log in to reply
1 reply to this topic

#1 SUPERAntiSpy

SUPERAntiSpy

    Member

  • Full Member
  • Pip
  • 23 posts

Posted 12 September 2007 - 04:27 PM

We have discovered a new rogue anti-spyware product (AntiVirGear from AntiVirGear.com)that was installed via a ZLOB/MediaAccess Codec installer from an adult site.

SUPERAntiSpyware definitions set Core : 3305 and Trace : 1311 will detect and remove this rogue.

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com

#2 grinler

grinler

    Bleeper

  • Expert
  • PipPipPipPipPip
  • 530 posts

Posted 14 September 2007 - 10:15 AM

Removal guide put up here:

How To Remove AntiVirgear

So far the only infector we have seen is C:\Windows\System32\wqzdtjg.dll under the SharedTaskScheduler key. This list will grow very quickly though.
<b>Lawrence</b>




Member of UNITE
Support SpywareInfo Forum - click the button