hxxp://www.flvdirect.com/
http://sunbeltblog.blogspot.com/2010/04/bot-installs-adware-along-with-video.html
hxxp://www.flvdirect.com/
http://sunbeltblog.blogspot.com/2010/04/bot-installs-adware-along-with-video.html
SiteTruth is not very positive either:
Site rating
Rating: “Site ownership unknown or questionable.”
No Location
Domain to be rated
Will rate domain “flvdirect.com”
Secure certificate
No valid certificate.
Contents of web site
Site “FLV Direct”
No street address found on the site.
Negative information report
No negative information on file.
Information from secondary sources
Commercial site.
Rating history
No rating history on file.
Site Internet address: 174.137.132.248
Examined on 2010-04-21 13:56:05
Rating #118576
polonus
Even Cnet post download for this adware.
hxxp://download.cnet.com/FLV-Direct-Player/3000-2139_4-75115630.html
I sendt it to MBAM yesterday, and it is now detected as " Adware.Dropper "
Anubis
http://anubis.iseclab.org/?action=result&task_id=1fa85256ce9c555b4fda3a993cb63c594&format=html
VirusTotal score is still the same 1/41
Malwarebytes detected FLV direct as “Adware DoubleD”
But Avast still not detecting it!
http://virusscan.jotti.org/en/scanresult/4e24a88cc0dedac4d5ba8f9be44c83591b7bb3c8
http://virscan.org/report/9846a08ae91c44e7e8883a4ab17be03b.html
I think we may have a new version, i downloaded a new and tested
My MBAM say Adware.Dropper but does not detect Nr.2
C:\Users\odd\Downloads\virus_sample\FLVDirect\FLVDirect.exe (Adware.Dropper) → Quarantined and deleted successfully.
VirusTotal - 4/40 - MD5 : 4021a1aefeb40d31d285a21aaf95ec89
http://www.virustotal.com/analisis/06959c6768be6ef8131ae6c3e3a09b83bc693a14afd86f1d676cca71473b6ba6-1272041570
VirusTotal - 5/41 - MD5…: da968b5bb922b6d102731d0333b9f338
http://www.virustotal.com/analisis/ff20473284f3c3d30e4e39b8ed3a58b6b037e2e239bc2bbcd3fc5be94e2cc53d-1272041790
Still not detected
hello
i can´t register my avast 5.0 free, it ask me for a file with the license, but in the demo, just shows to click on the interface cut and past the license number not for a file.
can somebody tell me what am i doing wrong?
Yes they do, on the original submitted sample and so does MBAM
http://www.virustotal.com/analisis/ff20473284f3c3d30e4e39b8ed3a58b6b037e2e239bc2bbcd3fc5be94e2cc53d-1272384519
and from MBAM forum / Quote:
The FLVplayer available from the homepage is not the same file as the FLV player that has been in the news for being spammed@ social network sites with Loudmo adware thrown into the install
We will not add detection for files from the hompage source but we are tracking the ones that have been tampered with by their rogue affiliate…
and when i download a new FLVD player and send it to virustotal…avast detect it…so why not your sample @harman123 ???
http://www.virustotal.com/analisis/2a29cb41d4d32dba30a92706698c1de75b4f237be2c4741152513669ed479454-1272386424