ScamSearch.com Delivered Nasty Malware that Blew By Avast! AV

Viruses and worms
1

hello…wanted to mention an experience we had yesterday with a site called ScamSearch.com. Went to this site and it delivered a nasty package of malware. Wondering how it was all able to get past the latest version of Avast! home on my desktop. Here’s more information, from our blog at http://blog.consumerwebwatch.org and http://www.stopbadware.org:

May 13, 2009
Nasty Packet of Malware and Badware from ScamSearch.com

Echoing the previous post: Don’t go to that site! Here’s a partial list of some of the malware the site pipelined into my laptop – I’ve been trying to fix it since 10 a.m. this morning and it’s now about 4 p.m. I had Avast! turned on and my firewall turned off, by the way:
Win32:Agent-LV2[Rtk]
hupigon13, a Chinese virus that attacked Korea a few years ago;
nurech;
Win32Delf,
and more. Site should be taken down; we’re going to work on that. I had to run Spybot twice, download something called SDFix that I had to run from Windows safe mode, download and run AVG’s free anti-rootkit software, and reboot about 20 times (after several freeze-ups that caused me to unplug my power cord and remove my battery…

2

You can also send it to those at avast, to aid future detection:
If you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be an undetected virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

Also a link to this thread may help.

-Scott-

EDIT:Wahey, 100 posts!! :slight_smile: :slight_smile: