Thursday, May 21, 2009

Free Download Antivirus: ThreatFire Antivirus

PCs are under constant attack from viruses, spyware and identity theft. Every day you hear about a new threat to your PC. They're coming faster than ever before, they're getting harder to stop and traditional antivirus products are not able to keep up.

Will your antivirus software catch the latest malware that just came out today? In most cases, no, because it simply does not know how to detect it yet. But ThreatFire's ActiveDefense technology does, and has proven to provide up to 243% more protection when combined with traditional AntiVirus products
If I already have antivirus software why do I need ThreatFire?

ThreatFire is dramatically different to traditional antivirus software. Normal antivirus products usually need to have first identified and seen a threat before they can provide adequate protection against it. The protection is then provided via a signature or fingerprint update, which must first be written by an antivirus researcher. This creates a large window of time where threats are undetected and can therefore infect your PC even when you have antivirus software installed.

Free Download ThreatFire

Wednesday, May 6, 2009

Virus: Win32:VB-CD alias Kamasutra

The worm Win32:VB-CD [Wrm] or Win32:VB-CD2 [Wrm] is a mail worm known also as Nyxem-E, Blackmal-F, MyWife-D or Grew or (perhaps locally and usually in news) as Kamasutra.This worm spreads by e-mail and by network shares. It kills processes of miscelaneous antivirus and security programs and deletes files of them. The worm is destructive, tries to delete files of certain types every 3-rd day in month.

When executed, the worm creates one of the listed files:

  • %windows%\Rundll16.exe
  • %system%\New winzip file.exe
  • %system%\sample.zip
  • %system%\winzip_tmp.exe

and files:

  • %system%\scanregw.exe
  • %system%\update.exe
  • %system%\sample.zip
  • %system%\winzip.exe

The worm is autostarted with Windows using the registry key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Its item „ScanRegistry” has the value “%System%\scanregw.exe /scan”

The worm collects mail addresses from documents on the infected computer. The infected mail has one of the Subjects:

*Hot Movie*
A Great Video
Arab sex DSC-00465.jpg
eBook.pdf
Fuckin Kama Sutra pics
Fw:
Fw: DSC-00465.jpg
Fw: Funny :)
Fw: Picturs
Fw: Sexy
Fwd: image.jpg
Fwd: Photo
give me a kiss
Miss Lebanon 2006
My photos
Part 1 of 6 Video clipe
Re:
Re: Sex Video
School girl fantasies gone bad
The Best Videoclip Ever
the file
Word file
You Must View This Videoclip!

The infected attachment is in the file named

007.pif
04.pif
677.pif
document.pif
DSC-00465.Pif
eBook.PIF
image04.pif
New_Document_file.pif
photo.pif
School.pif

Sometimes, the attachment is MIME encoded and uses one of the names

3.92315089702606E02.UUE
Attachments00.HQX
Attachments001.BHX
Attachments[001].B64
eBook.Uu
Original Message.B64
SeX.mim
Sex.mim
Video_part.mim
WinZip.BHX
Word_Document.hqx
Word_Document.uu

In such case, special tool is needed to unpack and execute the worm.

On every 3-rd day of month, the worm tries to delete data files with the extensions *.dmp, *.doc, *.mdb, *.mde, *.pdf, *.pps, *.ppt, *.psd, *.rar, *.xls, *.zip

avast! with VPS file dated on or after 17th January 2006 is able to detect this worm.

_________________________________________________________

Windows Repair Kit

Saturday, May 2, 2009

FREE ANTI VIRUS: Panda Cloud Antivirus


Thanks to Panda Security’s Collective Intelligence malware and goodware online database, Panda Cloud Antivirus detects more malware than traditional signature-based solutions which take longer to detect the most recent, and therefore most dangerous, variants.

With Panda Cloud Antivirus we introduce a new protection model based on a thin-client agent & server architecture which services malware protection as opposed to locally installed products. By combining local detection technologies with cloud-scanning capabilities and applying non-intrusive interception techniques on the client architecture, Panda Cloud Antivirus provides some of the best protection with a lightweight antivirus thin-client agent that barely consumes any PC resources.

Light Light

Panda Cloud Antivirus protects you while you browse, play or work and you won’t even notice it. It is extremely light as all the work is done in the cloud.

Secure Secure

Panda Cloud Antivirus provides you with the fastest protection against the newest viruses thanks to its cloud-scanning from PandaLabs’ servers.

Easy Easy

Panda Cloud Antivirus is truly install and forget. Don’t worry about updates, configuration or complicated decisions ever again.

Saturday, April 25, 2009

FREE ANTI VIRUS: PC Tools AntiVirus Free Edition

With PC Tools AntiVirus Free Edition you are protected against the most nefarious cyber-threats attempting to gain access to your PC and personal information. Going online without protection against the latest fast-spreading virus and worms, such as Netsky, Mytob and MyDoom, can result in infections within minutes.

Once infected, the virus will usually attempt to spread itself to your friends, family and associates by accessing your email contacts and networked PCs. The infection may also allow hackers to access files on your PC, use it to launch attacks against other computers and websites or to send mass SPAM email.

That's why PC Tools AntiVirus Free Edition provides world-leading protection, with rapid database updates, IntelliGuard™ real-time protection and comprehensive system scanning to ensure your system remains safe and virus free. PC Tools products are trusted and used by millions of people everyday to protect their home and business computers against online threats.

PC Tools AntiVirus Free Edition feature highlights

  • Protects your PC as you are working, surfing and playing
  • Detects, quarantines, disinfects and destroys Viruses, Trojans and Worms
  • IntelliGuard™ protects your computer against threats in real-time
  • Automatically checks for frequent updates against the latest threats
  • Best of all it's FREE. No catches, limitations or time-limit
PC Tools AntiVirus

Thursday, April 23, 2009

Free Anti Virus: SuperAntiSpyware Free Edition

SuperAntiSpyware, a next generation product, with its Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware and remove over 1,000,000 pests such as Vundo, ZLob, SmitFraud, WinFixer, VirusRay, and VirusHeat. Repair broken Internet connections, desktops, registry editing, and task manager. The program provides complete and custom scanning of hard drives, removable drives, memory, registry, individual folders include trusting items and excluding folders for complete customization of scanning. Detect and remove spyware, adware, malware, Trojans, dialers, worms, keyloggers, and hijackers. Prevent potentially harmful software from installing or re-installing. First Chance Prevention examines over 50 critical points of your system each time your system starts up and shuts down to eliminate threats before they have a chance to infect and infiltrate your system. Our Direct Disk Access (DDA) technology sees rootkits others miss.

Version 4.25.1014 includes Smart Definitions to detect zero-day threats,Improved rootkit removal technology to handle rootkits that disable security applications,Updated Direct Registry Access (DRA) Technology.

Super Antispyware.com

Anti Spyware Software

CNet Download.com

Return of AVG's LinkScanner

When AVG Technologies slurped up Exploit Prevention Labs, it rolled the standalone LinkScanner security app into its popular antivirus offerings. While the newfound ability to rate search results and live Web pages for safety ratings lent AVG products some extra relevancy and clout, not everyone wants to download a full-blown security app just to get a warning or go-ahead to search a Web site.

Thankfully, AVG Technologies has seen the error of its bundling-only ways, and has rereleased LinkScanner as a free, standalone add-on for Firefox or Internet Explorer once again. This is particularly sanguine news for those who noted performance bungles when using rival software like McAfee SiteAdvisor (for Firefox and IE).

Those well-versed in the LinkScanner of yore won't see too many changes in the new LinkScanner 8.5. The usual red, yellow, and green flags emerge on Google and Yahoo search results, and on the Web page itself, to tip you off if the page in question might contain harmful or seedy elements.

We're glad to see LinkScanner back on its own, and after you read up on this handy security scout, you might be, too.

Read the hands-on review of Link Scanner

Download LinkScanner 8.5

Download.com )