Professional support on Windows software, PUAs removal.

VirusTotal

Sunday, August 3, 2014

FAKE VMware Player download resource found!




Please be careful when you google some hot keyword like the above one, VMware Player. If you're an inexperienced Internet user, you would probably get the same sponsored reasult, too.

Specs about the URL:

  • Link address: vmware.get-free.net/  (Copyright get-free.com 2014)
  • Related scan log at VT: It's Clean, by far. Details at https://www.virustotal.com/en/url/b0c083cf6024f2586723304e0f7f650ba4b8a1c05b66285eb6d2b613c7abb284/analysis/1407113918/
After clicking the Download button, some bad thing get started: the pup-up like page asked the permission to download Fast Media Converter, instead!



Details about the download:
  • Filename: setup
  • Filesize: 599 KB (613,896 bytes)
  • Digital Signatures: Rollnon, alerts@vertitechnology.com
  • Detection ratio: 9 / 54 (according to VT, here's goes the info, https://www.virustotal.com/en/file/96632c5839af7b4e5483c282c719d841e901730d65119c57956d179a1ab620ea/analysis/1407114137/)
  • MD5: 5be170eee06c1885ccb89e6f5e475a6c
Running that installation package will surely trigger the adware infection: we got Re-Markable installed without knowledge!








No comments:

Post a Comment