Comments on: AVprofit: Rogue AV + Zeus = $ http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: DrZaiusApeLord http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4536 DrZaiusApeLord Sat, 27 Mar 2010 20:50:29 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4536 I never even heard of the ones that couldnt detect it. AhnLab-V3? Authentium? The top 10 or so AV products are pretty good at detection and SBE is free for home users. The whole 'x out y couldnt detect this' is a lame scare tactic. I never even heard of the ones that couldnt detect it. AhnLab-V3? Authentium?

The top 10 or so AV products are pretty good at detection and SBE is free for home users. The whole ‘x out y couldnt detect this’ is a lame scare tactic.

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: Tom http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4515 Tom Fri, 26 Mar 2010 13:04:41 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4515 I can't tell you what the 16 out of 42 were, but here's the link for the current results: http://bit.ly/al6Vrx I can’t tell you what the 16 out of 42 were, but here’s the link for the current results: http://bit.ly/al6Vrx

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: padman68 http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4481 padman68 Thu, 25 Mar 2010 15:35:54 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4481 So what were the "16 out of 42 anti-virus products it used to scan the installer file detected it as malicious"? So what were the “16 out of 42 anti-virus products it used to scan the installer file detected it as malicious”?

Like or Dislike: Thumb up 0 Thumb down 2
]]> By: qka http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4456 qka Thu, 25 Mar 2010 01:21:34 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4456 Only if you're a Windows user.

Only if you’re a Windows user.

Hot debate. What do you think? Thumb up 5 Thumb down 4
]]> By: wiredog http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4444 wiredog Wed, 24 Mar 2010 19:07:02 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4444 So I probably shouldn't click on this: http://www.failcomputer.com/?p=522

So I probably shouldn’t click on this:
http://www.failcomputer.com/?p=522

Hot debate. What do you think? Thumb up 3 Thumb down 7
]]> By: Tom http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4441 Tom Wed, 24 Mar 2010 18:32:12 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4441 Thanks! That did the trick. I really just wanted to see if whether or not my AV program detected it. It does, but the overall results have also improved quite a bit since Brian's post: 33/41 (80.49%) Thanks! That did the trick.

I really just wanted to see if whether or not my AV program detected it. It does, but the overall results have also improved quite a bit since Brian’s post: 33/41 (80.49%)

Like or Dislike: Thumb up 2 Thumb down 2
]]> By: Nart http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4435 Nart Wed, 24 Mar 2010 17:45:14 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4435 Nice Work. Updatekernel.com is also the c&c used in the spearphishing attacks that used portions of your article about spearphishing attacks against .gov & .mil email addresses. http://www.nartv.org/2010/03/01/the-kneber-botnet-spear-phishing-attacks-and-crimeware/ Nice Work. Updatekernel.com is also the c&c used in the spearphishing attacks that used portions of your article about spearphishing attacks against .gov & .mil email addresses.

http://www.nartv.org/2010/03/01/the-kneber-botnet-spear-phishing-attacks-and-crimeware/

Like or Dislike: Thumb up 1 Thumb down 2
]]> By: Mike http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4429 Mike Wed, 24 Mar 2010 14:37:28 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4429 don't include the 0x

don’t include the 0x

Hot debate. What do you think? Thumb up 4 Thumb down 4
]]> By: Tom http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4428 Tom Wed, 24 Mar 2010 14:25:55 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4428 Interesting - I just ran a md5/sha1 analysis at VirusTotal.com of the hashs provided in the ThreatExpert report and each one error-ed out every time. "Error: Please check you had introduced a correct hash and copied every character from the control key." Interesting – I just ran a md5/sha1 analysis at VirusTotal.com of the hashs provided in the ThreatExpert report and each one error-ed out every time.

“Error:
Please check you had introduced a correct hash and copied every character from the control key.”

Like or Dislike: Thumb up 3 Thumb down 3
]]> By: Pete http://krebsonsecurity.com/2010/03/avprofit-rogue-av-zeus/comment-page-1/#comment-4427 Pete Wed, 24 Mar 2010 14:10:08 +0000 http://www.krebsonsecurity.com/?p=1950#comment-4427 This smells familiar : http://borntobebest.biz/ This smells familiar : http://borntobebest.biz/

Like or Dislike: Thumb up 1 Thumb down 5
]]>