Security-X

Forum Security-X => News => Discussion démarrée par: chantal11 le mars 29, 2011, 11:09:57

Titre: Are you using the right "System Tool"?
Posté par: chantal11 le mars 29, 2011, 11:09:57

Bonjour,

Citer

Recently, we have been seeing a lot of the Winwebsec rogue branded as "System Tool". Winwebsec authors have been using this brand since last year, but lately these have been seen using more aggressive campaigns.

Winwebsec is installed in a variety of ways. One of the ways is by imitating popular applications. For example, it may use the file name adobe_update_2011.exe and then the UltraEdit (editor tool) icon.

At this point, users who are familiar with Adobe should know that this is not the correct icon, and users of UltraEdit know that it doesn't come with such a file name.

(https://forum.security-x.fr/proxy.php?request=http%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fportal%2Fblog-images%2FSystemTool%2FSystemTool-file.png&hash=58b641747ad98fe5d7c7d5aa9a2bba21506c5144)

Upon successful installation, System Tool creates the following icon on your desktop:

(https://forum.security-x.fr/proxy.php?request=http%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fportal%2Fblog-images%2FSystemTool%2FSystemTool-image.png&hash=1f3128ef897f7de7cc64b1533bbb8f9738e06200)

Lire la suite sur Microsoft Malware Protection Center (http://blogs.technet.com/b/mmpc/archive/2011/03/28/are-you-using-the-right-quot-system-tool-quot.aspx)

@+