Advice Request Secure Antivirus 360 - Found on Cnet

[Ink]

-http://download.cnet.com/Secure-Antivirus-360/3000-2239_4-77391279.html

I was not sure about it's known reputation or whether it's safe for general users. I booted up VBox to see what it offered, here's a few screenshots.

Is there any further information about it's virus engine, is it licensed, who are the developers? Is it a scam?

Other UI



Main UI

 

[yigido]

from your cnet link.. the publisher is

http://www.printtechsupport.com/index'

It is a support scam! The website also blocked by Bitdefender, ESET & Malwarebytes hpHosts
So no need an adventure..uninstall it and report it to CNET..
I can't believe how they release such things as legal..

 

[Ink]

from your cnet link.. the publisher is here
It is a support scam! The website also blocked by Bitdefender, ESET & Malwarebytes hpHosts
So no need an adventure..uninstall it and report it to CNET..
I can't believe how they release such things as legal..

That's why I didn't link the Homepage to the software. I downloaded straight from Cnet in VM.

 

[yigido]

That's why I didn't link the Homepage to the software. I downloaded straight from Cnet in VM.

Good move, we should report it. I am still investigating..

 

[frogboy]

Stay away from this i think, BitdefenderTrafficlight says it is malware.

 

[yigido]

Adguard added this site to their blacklist, FYI

 

[XIII]

All I can do is laugh.

 

[yigido]

Reverse.it analyses:
https://www.reverse.it/sample/39c81...15a3b0f8af4de7c5e542c3966d1?environmentId=100

It is trying to read your browser history, too.

 

[XIII]

Reverse.it analyses:
https://www.reverse.it/sample/39c81...15a3b0f8af4de7c5e542c3966d1?environmentId=100

It is trying to read your browser history, too.

It reads clipboard and keystrokes too. This is a keylogger in "AV" form.

 

[yigido]

It reads clipboard and keystrokes too. This is a keylogger in "AV" form.

Nice find @Huracan LOL

 

[Solarquest]

good catch @Huracan ,

https://www.hybrid-analysis.com/sam...15a3b0f8af4de7c5e542c3966d1?environmentId=100

https://www.virustotal.com/en/file/...ba77094215a3b0f8af4de7c5e542c3966d1/analysis/

 

[Guest28]

Fake avs are coming back??? I use to love the support chats they offered back in 2007-2008. I'm going to download this and troll them Beyond comprehension. I use to love adware alerts chat I would spend hours clogging their systems up

 

[_CyberGhosT_]

Awesome catch Huracan
PS: I love MeatWads support chat lol, too funny.

 

[jamescv7]

I see the obvious part of the interface.

Usually the telephone hotline is not usually visible on the interface but on proper location; second the description/labels inputted are not professionally created.

From the first place, I thought something related to Qihoo 360 but definitely none since '360' is not a patented name label.

 

[yigido]

I see the obvious part of the interface.

Usually the telephone hotline is not usually visible on the interface but on proper location; second the description/labels inputted are not professionally created.

From the first place, I thought something related to Qihoo 360 but definitely none since '360' is not a patented name label.

Obviously, this is not an AV, it is just an interface to throw the phone number to victim's faces.

 

[Wave]

Notice anything similar with this product? I found this product a few months back and I couldn't remember the name, but I recognised the UI layout... So I booted into the VM and used a snapshot to find the product:

hxxp://shieldapps.com/products/shield-antivirus/

 

[Omnipotent]

You can tell from just the name that it's fake. I'm not going to lie though, the interface looks appealing.

 

[yigido]

@Wave are you digging into it? Is it fake or legal app with poor reputation?
I suspect that from GUI (844 XXX XXX Call Free Support) it can be fake
Edit: It is fake! Stay away1

 

[Janl1992l]

the ui isnt bad. i like it lol.

 

[Guest28]

Looks just like bitdefenders new free antivirus GUI.