anybody is making any relevant difference between 3 malware:
vundo
renos
zlob

3 of them are installing or poping up advertisement for fake antivirus

any idea??

From: "Lolo" <(E-Mail Removed)>

| anybody is making any relevant difference between 3 malware:
| vundo
| renos
| zlob

| 3 of them are installing or poping up advertisement for fake antivirus

| any idea??


Renos is a Fake Alert and is similar to ZLob.

Vundo sometimes acts like ZLob in offering faux or rogue malware but is different in the
way it infects the PC such as using Winlogon/Notify and a BHO to load.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Thx for your reply David...

As far as i can see, is that those 3 malwares are used for advertisement so
money is involve here.
Are they from the same bad guys? i would say yes even if i have nothing to
prove that fact...and if they're not from the same bad guys those guys are
probably sharing source code...

any thoughts?

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:2%2Uj.5200$sp.4624@trnddc02...
> From: "Lolo" <(E-Mail Removed)>
>
> | anybody is making any relevant difference between 3 malware:
> | vundo
> | renos
> | zlob
>
> | 3 of them are installing or poping up advertisement for fake antivirus
>
> | any idea??
>
>
> Renos is a Fake Alert and is similar to ZLob.
>
> Vundo sometimes acts like ZLob in offering faux or rogue malware but is
> different in the
> way it infects the PC such as using Winlogon/Notify and a BHO to load.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>

From: "Lolo" <(E-Mail Removed)>

| Thx for your reply David...

| As far as i can see, is that those 3 malwares are used for advertisement so
| money is involve here.
| Are they from the same bad guys? i would say yes even if i have nothing to
| prove that fact...and if they're not from the same bad guys those guys are
| probably sharing source code...

| any thoughts?

Money is the motive.

They aren't from the same sources.

The ZLob and Vundo are completely two different families.

The Vundo is associated with Amaena.Com and the Virtumonde Adware.

The ZLob may be associated with the RBN.

I don't think they share the same code just concepts.


>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp






--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp