A clone of the annoying and well spread rogue SecurityTool has now been released. It's hosted on a Russian domain and is named SmartSecurity.
A word of caution: Microsoft has issued a warning on an unpatched vulnerability that could affect users of Windows 2000, Windows XP, and Windows Server 2003, running Internet Explorer.
“The vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer,” the security advisory reads. “If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed…”
A new clone from the MalwareCatcher rogue security software family has now been released.
The fraud tool is called SecurityAntivirus and will add hundreds of registry keys within:
A new rogue that will randomly change names and include a reference to the current operating system has emerged.
The rogue will change to different names depending on the user's OS. On Windows XP we have encountered the following: