Rogue security software, often referred to as scareware, is one of the biggest challenges that computer users are faced with right now. Taking the form of legitimate-looking anti-virus, anti-spyware and anti-malware products, these rogue applications look to be beneficial from a security perspective but provide little or no security, generate misleading alerts, or attempt to lure users into participating in fraudulent transactions - blurring the lines between genuine software and applications that put you in harm’s way.
In order to help you clearly see what programs are considered rogue – and avoid them – Lavasoft Malware Labs is proud to introduce a brand new site: the Rogue Gallery.
REAnti is yet another clone of WiniGuard. This one comes with the same GUI (graphic user interface) as previous ones like KeppCop, SecureKeeper, SiteVillain and AntiAID.
I found a couple of slides from a company internal training session and thought I would share them. It's just to give an example of the kind of work the Lavasoft research team at Malware Labs does.
It describes the binary analysis of a Win32.TrojanDropper.KGen sample, the malware multi-component structure and the payload it implements.
- 1 of 3
- ››