Misleading article

[Li'l Abner]

I was looking around for a little information about ComboFix (which I swear by) and came across this link:
http://www.articlesbase.com/security...x-2195028.html
or http://************/25uvxdl
The article is labeling a *problem* as Combofix and gives instructions on how to remove it.

--
--- Everybody has a right to my opinion. ---

[siljaline]

Li'l Abner wrote:
>I was looking around for a little information about ComboFix (which I swear by) and came across this link:
> http://www.articlesbase.com/security...x-2195028.html
> or http://************/25uvxdl
> The article is labeling a *problem* as Combofix and gives instructions on how to remove it.

Best bet would be to contact owner of ComboFix.

I can find out if the site does not point to a particular person, let me know.

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[John Mason Jr]

On 8/22/2010 12:25 AM, siljaline wrote:
> Li'l Abner wrote:
>> I was looking around for a little information about ComboFix (which I swear by) and came across this link:
>> http://www.articlesbase.com/security...x-2195028.html
>> or http://************/25uvxdl
>> The article is labeling a *problem* as Combofix and gives instructions on how to remove it.
>
> Best bet would be to contact owner of ComboFix.
>
> I can find out if the site does not point to a particular person, let me know.
>
> Silj
>
>

Article has links that point to hxxp://www.bestspywarescanner.net

VT report on BestSpywareScanner_Setup.exe

http://www.virustotal.com/file-scan/...65a-1282451614


Malwarebytes indicates it's malware


John

[siljaline]

John Mason Jr wrote:
> Article has links that point to hxxp://www.bestspywarescanner.net
>
> VT report on BestSpywareScanner_Setup.exe
>
> http://www.virustotal.com/file-scan/...65a-1282451614
>
>
> Malwarebytes indicates it's malware

Nice catch !

ESET NOD32 AV catches the exe as "Win32/Adware.SpywareCease"
Submitted to ESET for analysis and suggestion to add to their Rogue removal tools page.
(http://kb.eset.com/esetkb/index?page...nt&id=SOLN2372)

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_