Another malicious Movie site

Landing on the following site ... the typical layout of clickable images is displayed with the following message

"Video is protected by unique technology PriveContent" ... well that's something new ...

 Image edited for display purposes

If you click the "Enable video now" you are redirected to a download that is detected as "Trojan.Fake.GoogleBar"
or directly accessing the site of the download you see a similar message ...

If you read the text in the above prompt it's laughable ... "you will receive 98 dollars" ... yeah right! all you get is an infected computer. VirusTotal results here ... SunBelt technical results here ...

From their EULA: "You grant PC permission to add/remove features and/or functions to the existing software and/or service, or to install new applications from PC, third parties or any other application, at any time, in our sole discretion, with or without your knowledge and/or interaction."

Now if the above statement doesn't alert you that you will be infected I don't know what does ...

Published Monday, April 14, 2008 10:36 AM by winhelp2002