New Rogue Program: AndromedaAV

[Randy Knobloch]

Symantec discovered a new Rogue (misleading application) software name AndromedaAV by
Andromeda-AV.com

Info >
http://www.symantec.com/security_response/writeup.jsp?docid=2008-082710-2239-99&tabid=2

Removal Instructions here >

http://www.bleepingcomputer.com/malware-removal/remove-andromeda-antivirus

**Thanks to Donna B, MS MVP, for this write-up.**

 

[Stu]

Is it really new or a variation to an old theme? Not that I`m suggesting (for
one minute), anyone should take it lightly. I ran thru the MS Security Portal
Encyclopedia and scored 97 hits at last count. Take your pick?

Norton says this : http://www.symantec.com/norton/theme.jsp?themeid=mislead

I rather like the description with illustration (pictures are good for me)
but would leave the `What to Do`as a matter of personal preference.

Let`s be careful out there by keeping our defs up to date

Stu

 

[Stu]

Oh! And practising Safe Hex .... Or was it `Hafe Sex`? .. (spoonerism).

Stu

 

[Randy Knobloch]

Is it really new or a variation to an old theme? Not that I`m suggesting (for
one minute), anyone should take it lightly. I ran thru the MS Security Portal
Encyclopedia and scored 97 hits at last count. Take your pick?

Norton says this : http://www.symantec.com/norton/theme.jsp?themeid=mislead

I rather like the description with illustration (pictures are good for me)
but would leave the `What to Do`as a matter of personal preference.

Let`s be careful out there by keeping our defs up to date

As the Subject Line indicates, Stu - it's a *new* Rogue App. not a variation on an old
one.

Regards,

 

[Stu]

Thank you Randy. On a more light hearted note. You don`t think this guy could
be a `Star Trek` freak do you?

http://en.wikipedia.org/wiki/Andromeda_(TV_series)

Stu

 

[Bill Sanderson]

It used to be that the bad guys would give themselves away by poor grammar
or spelling, or simply misusing the language. The product name might be
something that appealed to the creator, but I suspect that it is intended to
appeal to a target audience--and as I look around me, it's probably us!

 

[Randy Knobloch]

Thank you Randy. On a more light hearted note. You don`t think this guy could
be a `Star Trek` freak do you?

http://en.wikipedia.org/wiki/Andromeda_(TV_series)

Your welcome, Stu - as Bill said, the "creators" like using catch-phrase names to attract
a captive audience. Look at some of the virus names, very catchy <g>

 

[Stu]

Hmm. I have caught on to that over the years but thank you guys anyway for
reminding me. On this occasion I`m very pleased not to have been a Star Trek
freak. Beam me up and away Scottie!!

Stu

 

[Randy Knobloch]

Hmm. I have caught on to that over the years but thank you guys anyway for
reminding me. On this occasion I`m very pleased not to have been a Star Trek
freak. Beam me up and away Scottie!!

That would be "Beam me up Scottie, there's no intelligent Life down here"...

 

[Stu]

<smile> ....... ????

Stu

That would be "Beam me up Scottie, there's no intelligent Life down here"...

 

[Bill Sanderson]

Now if they'd just used a tardis as a catchy icon....

 

[Stu]

Bill? You`re not a `Dr Who` fanatic are you? Does that screen in USA? There
was a time when (as a much younger person), I seemed to spend most of my life
in telephone boxs - trying to persuade some very nice lady that I was an
equally very nice and honourable man. I don`t think it was a police box
though. <smile>

Stu

 

[Bill Sanderson]

It has been shown on occasion, mostly late at night on the PBS network here.
And I've watched some of some seasons of it--I'm certainly not a fanatic,
but I enjoy it!