Masthead Corporate Logo
Subscribe eNewsletter Magazines
Search  Advanced

The Mil & Aero Blog

Bookmark this Blog Subscribe to an RSS Feed of this Blog.
<< Home

Xpantivirus attacks


Tuesday, April 15, 2008


Posted by John McHale

I got hit yesterday with a virus my IT guy hadn't seen before. Called the Xpantivirus, it fools you into thinking it's an antivirus software application that caught some spyware on your system and wants you to download the solution.

It had me till the download part. I thought that looks weird, called my IT guy and he said I dodged a bullet by not downloading. If I had it would've opened up a path for all sorts of malware, porn, and other crap to get into my computer.

So this is a little friendly warning in case any of you come across it. I got hit with it while surfing the web looking for information for a story.

My IT department provided the definition of the threat below.

Description: Xpantivirus is a rogue security tool, a program that claims to detect and remove or disable spyware, viruses, or other Internet threats. However, its capabilities are limited, and the tool may actually function as spyware or adware. This rogue anti-spyware tool often tricks users into purchasing. Trojan horse programs may force installs of Xpantivirus or make the application difficult to remove. It can be distributed through exploits particularly, the Vcodec vendor, which tricks user with Windows Media player codecs and forces an install.

Vendor: Xpantivirus.com

Threat level: medium risk

Xpantivirus characteristics: displays ads; hijacks internet browser; downloads unsolicited files; exploits a security flaw; distributes threats; installs without user consent; and makes fraudulent claims about spyware detection and removal.

Keep your eyes open.

Post a Comment

2 Comments:
Blogger Mr-Yellow said...
Yeah it's easy to avoid virus.

Most require you to run/download them, don't run them and they can't hurt you.

Worms on the other hand are automatic, however the router on most broadband connections hides your internal IP and makes you safe from these.

Spy Bot Search and Destroy "teatimer" registry monitor is all you'll ever need. No anti-virus software, no firewall, just a router and that regmon prog.

-Ben
Tuesday, April 15, 2008 8:18:00 PM EDT  

Blogger Gerald309 said...
A great place I found - very popular and legally compliant as kind of a "clearing house" for bad products as these:

Title: The Spyware Warrior List of Rogue/Suspect Anti-Spyware Products & Web Sites
Description: Bad, False, Fake products
URL: http://www.spywarewarrior.com/rogue_anti-spyware.htm

Much of these rogue fake products began in the WMF metafile zero day exploit in Windows a couple years ago. Sometimes called "ransomware" because they demand payment to "get rid" of the fake installation.
gerald philly pa usa:
webmaster bluecolarpc.net
Tuesday, April 22, 2008 11:37:00 AM EDT  


<< Home


Welcome to the lighter side of Military & Aerospace Electronics. This is where our staff recount tales of the strange, the weird, and the otherwise offbeat. We could put news here, but we have the rest of our Website for that. Enjoy our scribblings, and feel free to add your own opinions. You might also get to know us in the process. Proceed at your own risk.

John Keller for MAE
John Keller is editor-in-chief of Military & Aerospace Electronics magazine, which provides extensive coverage and analysis of enabling electronic and optoelectronic technologies in military, space, and commercial aviation applications. A member of the Military & Aerospace Electronics staff since the magazine's founding in 1989, Mr. Keller took over as chief editor in 1995.


Courtney Howard for MAE Courtney E. Howard is senior editor of Military & Aerospace Electronics magazine. She is responsible for writing news stories and feature articles for the print publication, as well as composing daily news for the magazine's Website and assembling the weekly electronic newsletter. Her features have appeared in such high-tech trade publications as Military & Aerospace Electronics, Computer Graphics World, Electronic Publishing, Small Times, and The Audio Amateur.


John McHale for MAE John McHale is executive editor of Military & Aerospace Electronics magazine, where he has been covering the defense Industry for more than dozen years. During that time he also led PennWell's launches of magazines and shows on homeland security and a defense publication and website in Europe. Mr. McHale has served as chairman of the Military & Aerospace Electronics Forum and its Advisory Council since 2004. He lives in Boston with his golf clubs.

Previous Posts

Archives
THE MAE WEBSITE AUTHORS ARE SOLELY RESPONSIBLE FOR THE CONTENT AND ACCURACY OF THEIR BLOGS, INCLUDING ANY OPINIONS THEY EXPRESS, AND PENNWELL IS NOT RESPONSIBLE FOR AND HEREBY DISCLAIMS ANY AND ALL LIABILITY FOR THE CONTENT, ITS ACCURACY, AND OPINIONS THAT MAY BE CONTAINED HEREIN. THE CONTENT ON THE MAE WEBSITE MAY BE DATED AND PENNWELL IS UNDER NO OBLIGATION TO PROVIDE UPDATES TO THE INFORMATION INCLUDED HEREIN.