가짜 백신 ISafe Antivirus

2008년에 이어 2009년도에도 허위 진단 결과를 출력하여 사용자의 불안 심리를 조성하고, 치료를 위해 제품 결제나 등록을 요구하는 [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4916981" target=_blank>허위 안티스파이웨어(Fraudware)</A>]들이 속속 보고되고 있다.   오늘 알려줄 ISafe Antivirus 에 대한 정보는 아래와 같으며, 상세정보는 [<A href="http://blog.daum.net/virusmyths/6041736" target=_blank>여기</A>]를 참고하기 바란다.     1. 감염 경로 : 특정 웹 사이트나 다른 악성코드에 의해 다운로드                  Isafeantiviru[삭제].com, Isafeanti[삭제].com, Isafe-[삭제]ivirus.com,                Isa[삭제]antivirus.com. Isa[삭제]ivirus.com, Isaf[삭제]virus.com   <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1327020E495F373C73" width=540 vspace=1 border=0 isset="true" actualwidth="540">     2. 파일 정보  - 파일명 : isf_2_1_setup.exe  - 크기 : 1,135,568 바이트 (MD5 : b5fb5e2cc0aefa942ff1b6b860ff24ad)  <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/156DB90D495F32DED2" width=503 vspace=1 border=0 isset="true" actualwidth="503">   3. 주요 증상 : 허위 감염 결과 출력   <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/116F450F495F37769E" width=540 vspace=1 border=0 isset="true" actualwidth="540">     <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/117DAE10495F3794C9" width=492 vspace=1 border=0 isset="true" actualwidth="492">     <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1571510D495F37A0DD" width=285 vspace=1 border=0 isset="true" actualwidth="285">     <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/116E8910495F3782CB" width=477 vspace=1 border=0 isset="true" actualwidth="477">     4. V3 Lite vs. 알약 (기준 : 2009-01-03, Full Updated)  - [<A href="http://blog.daum.net/virusmyths/4818109" target=_blank>무료백신</A>] [<A href="http://blog.daum.net/virusmyths/6041705" target=_blank>V3 Lite</A>]를 이용한 제거 : 가능  <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1221B90E495F37B360" width=540 vspace=1 border=0 isset="true" actualwidth="540">    - [<A href="http://blog.daum.net/virusmyths/4818109" target=_blank>무료백신</A>] [<A href="http://blog.daum.net/virusmyths/5052942" target=_blank>알약</A>]을 이용한 진단/제거 : 진단하지 못함   5. 보안 제품별 진단 여부 (기준 : 2009-01-01) <TABLE cellSpacing=0 borderColorDark=white align=center borderColorLight=black border=1> <TBODY> <TR> <TD> 안티바이러스</TD> <TD> 엔진 버전</TD> <TD style="TEXT-ALIGN: center"> 정의 날짜</TD> <TD> 검사 결과</TD></TR> <TR> <TD> a-squared</TD> <TD>4.0.0.73</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">Generic.Win32.Malware.Antispycheck!IK</TD></TR> <TR> <TD> AhnLab-V3</TD> <TD>2008.12.31.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> AntiVir</TD> <TD>7.9.0.45</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">DR/FakeAlert!.FK</TD></TR> <TR> <TD> Authentium</TD> <TD>5.1.0.4</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">W32/AV2008.C</TD></TR> <TR> <TD> Avast</TD> <TD>4.8.1281.0</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> AVG</TD> <TD>8.0.0.199</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">FakeAlert!.DG</TD></TR> <TR> <TD> CAT-QuickHeal</TD> <TD>10.00</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> ClamAV</TD> <TD>0.94.1</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> Comodo</TD> <TD>854</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> DrWeb</TD> <TD>4.44.0.09170</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> eTrust-Vet</TD> <TD>31.6.6286</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> Ewido</TD> <TD>4.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> F-Prot</TD> <TD>4.4.4.56</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">W32/AV2008.C</TD></TR> <TR> <TD> F-Secure</TD> <TD>8.0.14470.0</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> Fortinet</TD> <TD>3.117.0.0</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">W32/ISafeAntivirus.A!tr</TD></TR> <TR> <TD> GData</TD> <TD>19</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> Ikarus</TD> <TD>T3.1.1.45.0</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">Generic.Win32.Malware.Antispycheck</TD></TR> <TR> <TD> K7AntiVirus</TD> <TD>7.10.572</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> Kaspersky</TD> <TD>7.0.0.125</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">not-a-virus:FraudTool.Win32.ISafeAntivirus</TD></TR> <TR> <TD> McAfee</TD> <TD>5480</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> McAfee+Artemis</TD> <TD>5480</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> Microsoft</TD> <TD>1.4205</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">Program:Win32/FakeASC</TD></TR> <TR> <TD> NOD32</TD> <TD>3728</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> Norman</TD> <TD>5.80.02</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> Panda</TD> <TD>9.0.0.4</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> PCTools</TD> <TD>4.4.2.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> Prevx1</TD> <TD>V2</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> Rising</TD> <TD>21.10.22.00</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> SecureWeb-Gateway</TD> <TD>6.7.6</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Trojan.Dropper.FakeAlert!.FK</TD></TR> <TR> <TD> Sophos</TD> <TD>4.37.0</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">Troj/FakeAV-HW</TD></TR> <TR> <TD> Sunbelt</TD> <TD>3.2.1809.2</TD> <TD style="TEXT-ALIGN: center">2008.12.22</TD> <TD>-</TD></TR> <TR> <TD> Symantec</TD> <TD>10</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD style="COLOR: red">VirusResponseLab</TD></TR> <TR> <TD> TheHacker</TD> <TD>6.3.1.4.202</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD> TrendMicro</TD> <TD>8.700.0.1004</TD> <TD style="TEXT-ALIGN: center">2009.01.01</TD> <TD>-</TD></TR> <TR> <TD> ViRobot</TD> <TD>2008.12.30.1540</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD> VirusBuster</TD> <TD>4.5.11.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD colSpan=4>추가 정보</TD></TR> <TR> <TD colSpan=4>File size: 1135568 bytes</TD></TR> <TR> <TD colSpan=4>MD5...: b5fb5e2cc0aefa942ff1b6b860ff24ad</TD></TR></TBODY></TABLE>