Author Topic: download/v924?product_namehappilyeverafter.ex- detected as PUP!  (Read 1667 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
download/v924?product_namehappilyeverafter.ex- detected as PUP!
« on: January 12, 2014, 03:57:09 PM »
avast! detects: https://www.virustotal.com/nl/file/004ae52890468783608d9ca270356d28f390ef54e599a181f5e5382ce8048f2b/analysis/1389538247/
file comes from: https://www.virustotal.com/nl/url/fe2c83ec48a6b3ea384b0377be818369362d48f2d3acba3f9dc98025e9d536cb/analysis/1389538242/
DrWeb's URL checker flags it twice as blacklisted and as Adware.
htxp://www.zilliontoolkitusa.info/download/v924?product_namehappilyeverafter.exe is in Dr.Web malicious sites list!
htxp://www.zilliontoolkitusa.info/download/v924?product_namehappilyeverafter.exe contains an advertising software Adware.Downware.1541
IDS alerted here with two instances: http://urlquery.net/report.php?id=8789829 (unknown.ex-)

polonus
« Last Edit: January 12, 2014, 04:01:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: download/v924?product_namehappilyeverafter.ex- detected as PUP!
« Reply #1 on: January 12, 2014, 07:24:30 PM »
is does not show on VT, but also Detected by Norman as PUA (possible Unwanted Apllication) Installer.Rex.H

v924?product_namehappilyeverafter.exe