Dangerous Flash Drives – The End(?)

The vulnerability described in our previous two blog posts is closed. Microsoft released the patch with the “Critical“ severity and it is also part of the Automatic Updates. Patch details More information about the patch: Microsoft Security Bulletin MS10-046 -... [...more]

Virus Alerts Comments Off

Dangerous Flash Drives – part 2

The story continues. Microsoft released their Security Advisory with workarounds regarding the „ .lnk vulnerability “ described in our previous blog post. To help you protect your systems, here are the two official workarounds, or you can visit the official... [...more]

Virus Alerts Comments Off

Dangerous Flash Drives

And here it comes again. You though, that turning the “auto-run” feature for removable drives off is sufficient and no “Worm/Autorun” can harm you again. And I bet you are pretty sure about it. I’m sorry, you are wrong. Few... [...more]

Virus Alerts Comments Off

Believe it or not? (Fake AV and Fake IME)

It's irony when malware that drops and installs Chinese IME into victim`s system pretends to be a regular AV component. It was first discovered on common Chinese website infected by "Aurora" exploit. This exploit execution causes that malware file qi.exe... [...more]

Virus Alerts Comments Off

Zeus 2.0

Flickr Credit: Sebastia Giralt The title of this post might confuse some people. The 2.0 symbol may trigger thoughts about yet another social networking story we have all read in the last three years and probably do not want to... [...more]

Virus Alerts Comments Off

The Show Must Go On…

Flickr Credit: Raqib Our security research team is constantly monitoring what is happening on the Web that we at AVG should be aware of. Looking for malicious URLs, exploits, new obfuscation techniques are just a few of the tasks we... [...more]

Virus Alerts Comments Off

Japanese Ransom Trojan Horse

This BBC blog mentioned recently a new threat attacking Japanese users aka "Kenzero" trojan and we would like to clarify some information about it. AVG detects all known variants as Trojan horse Generic17.ATLK and Trojan horse PSW.Generic7.AUUX. This malware belongs... [...more]

Virus Alerts Comments Off

Copyright Violation Scam

After years of rogue antivirus and antispyware products, scaring users by tens or hundreds non-existing infections it seems that there is new way how to rip off computers user - we have noticed malware pretending to be “Antipiracy client scanner... [...more]

Virus Alerts Comments Off

NSS Labs’ Questionable Report

It’s interesting that this is the first time in AVG’s history that anyone has come out and said that our product flat out doesn’t catch what it’s supposed to catch. That doesn’t fit with our reputation and it doesn’t fit our own experience with our 110 million customers. It just doesn’t smell right. AVG eagerly awaits a further response from NSS so they can see for themselves that AVG does indeed protect its customers from the Aurora attack. [...more]

Virus Alerts Comments Off

Fake Antivirus case analysis

One of previous DHL scam campaign propagated downloader in ziped attachement named DHL_label_NR1156.exe. Collected Name: DHL_label_NR1156.exe SIZE: 41984 bytes MD5: f71d48a86776f8c0da4d7a46257ff97c After execution malware copies itself as incognito.exe into %system% folder. Downloader then gets two binaries named exe0.exe and dll.dll... [...more]

Virus Alerts Comments Off

 

February 2012
M T W T F S S
« Feb    
 12345
6789101112
13141516171819
20212223242526
272829