가짜 백신 Astrum Antivirus Pro

2009년도에도 여전히 허위 진단 결과를 출력하여 사용자의 불안 심리를 조성하고, 치료를 위해 제품 결제나 등록을 요구하는 [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4916981" target=_blank>허위 안티스파이웨어(Fraudware)</A>]들이 속속 보고되고 있다.   오늘 소개(?) 할 가짜 백신은 Astrum Antivirus Pro 로 정보는 아래와 같으며, 자세한 정보는  [<A href="http://blog.daum.net/virusmyths/6041834" target=_blank>여기</A>]를 참고하기 바란다.   1. 감염 경로 : 특정 웹사이트 또는 다른 악성코드에 의해 다운로드                    예) Astrum[삭제].com, Astru[삭제].com  <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/14185A0949958A9F89" width=540 vspace=1 border=0 isset="true" actualwidth="540">   2. 설치 파일 정보  - asv.exe (1,346,851 바이트, MD5 : f5efcde3fd38255e00c3c69a31709c56)   3. 주요 증상 : 허위 진단 결과 출력, 윈도우 방화벽 우회 등  <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1542E30B49958ADF72" width=540 vspace=1 border=0 isset="true" actualwidth="540">   <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1142E30B49958ADF73" width=476 vspace=1 border=0 isset="true" actualwidth="476">   <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1242E30B49958ADF74" width=285 vspace=1 border=0 isset="true" actualwidth="285">   <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/1342E30B49958ADF75" width=477 vspace=1 border=0 isset="true" actualwidth="477">   4. 보안 제품별 진단 여부 (기준 : 2008-12-31) <TABLE cellSpacing=0 borderColorDark=white width=540 align=center borderColorLight=black border=1> <TBODY> <TR> <TD>안티바이러스</TD> <TD>엔진 버전</TD> <TD style="TEXT-ALIGN: center">정의 날짜</TD> <TD>검사 결과</TD></TR> <TR> <TD>a-squared</TD> <TD>4.0.0.73</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Generic.Win32.Malware.Antispycheck!IK</TD></TR> <TR> <TD>AhnLab-V3</TD> <TD>2008.12.31.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>AntiVir</TD> <TD>7.9.0.45</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">TR/Fakealert!.MZ</TD></TR> <TR> <TD>Authentium</TD> <TD>5.1.0.4</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD style="COLOR: red">W32/AV2008.C</TD></TR> <TR> <TD>Avast</TD> <TD>4.8.1281.0</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD style="COLOR: red">Win32:Adware-gen</TD></TR> <TR> <TD>AVG</TD> <TD>8.0.0.199</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">FakeAlert!.DG</TD></TR> <TR> <TD>BitDefender</TD> <TD>7.2</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>CAT-QuickHeal</TD> <TD>10.00</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>ClamAV</TD> <TD>0.94.1</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Comodo</TD> <TD>851</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>DrWeb</TD> <TD>4.44.0.09170</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>eTrust-Vet</TD> <TD>31.6.6284</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Ewido</TD> <TD>4.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>F-Prot</TD> <TD>4.4.4.56</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD style="COLOR: red">W32/AV2008.C</TD></TR> <TR> <TD>F-Secure</TD> <TD>8.0.14470.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Fortinet</TD> <TD>3.117.0.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>GData</TD> <TD>19</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Win32:Adware-gen </TD></TR> <TR> <TD>Ikarus</TD> <TD>T3.1.1.45.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Generic.Win32.Malware.Antispycheck</TD></TR> <TR> <TD>K7AntiVirus</TD> <TD>7.10.572</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Kaspersky</TD> <TD>7.0.0.125</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>McAfee</TD> <TD>5479</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD>McAfee+Artemis</TD> <TD>5479</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD>Microsoft</TD> <TD>1.4205</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Program:Win32/FakeASC</TD></TR> <TR> <TD>NOD32</TD> <TD>3726</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Win32/Adware.AstrumAV</TD></TR> <TR> <TD>Norman</TD> <TD>5.80.02</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD>Panda</TD> <TD>9.0.0.4</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>PCTools</TD> <TD>4.4.2.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Prevx1</TD> <TD>V2</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Rising</TD> <TD>21.10.22.00</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>SecureWeb-Gateway</TD> <TD>6.7.6</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">Trojan.Fakealert!.MZ</TD></TR> <TR> <TD>Sophos</TD> <TD>4.37.0</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>Sunbelt</TD> <TD>3.2.1809.2</TD> <TD style="TEXT-ALIGN: center">2008.12.22</TD> <TD>-</TD></TR> <TR> <TD>Symantec</TD> <TD>10</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>TheHacker</TD> <TD>6.3.1.4.202</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD>TrendMicro</TD> <TD>8.700.0.1004</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD style="COLOR: red">TROJ_FAKEAV.ASV</TD></TR> <TR> <TD>VBA32</TD> <TD>3.12.8.10</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD style="COLOR: red">Win32.Adware.VirusResponseLab</TD></TR> <TR> <TD>ViRobot</TD> <TD>2008.12.30.1540</TD> <TD style="TEXT-ALIGN: center">2008.12.31</TD> <TD>-</TD></TR> <TR> <TD>VirusBuster</TD> <TD>4.5.11.0</TD> <TD style="TEXT-ALIGN: center">2008.12.30</TD> <TD>-</TD></TR> <TR> <TD colSpan=4 height=10>  <DIV style="HEIGHT: 10px"></DIV></TD></TR> <TR> <TD colSpan=4>추가 정보</TD></TR> <TR> <TD colSpan=4>File size: 1346851 bytes</TD></TR> <TR> <TD colSpan=4>MD5...: f5efcde3fd38255e00c3c69a31709c56</TD></TR></TBODY></TABLE>   5. [<A href="http://blog.daum.net/virusmyths/4818109" target=_blank>무료백신</A>] V3 Lite vs. 알약 (기준 : 2009-02-13) // 업데이트 1) [<A href="http://blog.daum.net/virusmyths/6041705" target=_blank>V3 Lite</A>]를 이용한 제거 [추천]  <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/14531D0A49958B5FA2" width=540 vspace=1 border=0 isset="true" actualwidth="540">   2)  [<A href="http://blog.daum.net/virusmyths/5052942" target=_blank>알약</A>]을 이용한 진단/제거 [추천] <IMG class=tx-daum-image style="CLEAR: none; FLOAT: none; CURSOR: pointer" hspace=1 src="https://t1.daumcdn.net/cfile/blog/15531D0A49958B5FA3" width=451 vspace=1 border=0 isset="true" actualwidth="451">     6. 주의해야 할 허위 안티스파이웨어 (가짜 백신) : 일부 통하기 공개   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4917009" target=_blank>백신소프트웨어2007</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4916983" target=_blank>PC보안 Patch</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4996861" target=_blank>PC박사</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5004571" target=_blank>스파이원샷</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5004587" target=_blank>클린엑스</A>],    [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5167109" target=_blank>유웨어(Uware)</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5004590" target=_blank>PC터보</A>], [<A class=con_link style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4996864" target=_blank>코드클린</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5167101" target=_blank>클리어디스크</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5336013" target=_blank>닥터바이러스</A>],   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5336011" target=_blank>닥터스파이제로</A>], [<A href="http://blog.daum.net/virusmyths/6041812" target=_blank>SysAntivirus 2009</A>], [<A href="http://blog.daum.net/virusmyths/6041744" target=_blank>Express Antivirus 2009</A>], [<A href="http://blog.daum.net/virusmyths/6041725" target=_blank>Spyware Expert</A>],   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/6041718" target=_blank>Antivirus 360</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/6041703" target=_blank>PerfectDefender2009</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5901721" target=_blank>Antispyware XP 2009</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5886332" target=_blank>PC Defender 2008</A>],    [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5681004" target=_blank>Xp Protector 2009</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5697177" target=_blank>Antispyware Pro XP</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5661524" target=_blank>SmartAntivirus2009</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5623631" target=_blank>TotalSecure2009</A>],   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5393506" target=_blank>AntiVirusXP2008</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5775698" target=_blank>eAntivirusPro</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5542170" target=_blank>VirusRemover2008</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5525754" target=_blank>WinAntiSpyware</A>],   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5398847" target=_blank>AntiSpyCheck</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5555737" target=_blank>AntivirusDoc</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5431935" target=_blank>Antivirus Master</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5484617" target=_blank>Power AntiVirus 2009</A>],   [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5484617" target=_blank>PyroAntiSpy</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5106925" target=_blank>AntiSpyBoss</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5094770" target=_blank>AntiSpyZone</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5004582" target=_blank>SpySpotter</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/5092902" target=_blank>SystemDefender</A>],   [<A href="http://blog.daum.net/virusmyths/6041833" target=_blank>XPPoliceAntivirus</A>], [<A style="COLOR: #666666" href="http://blog.daum.net/virusmyths/4916981" target=_blank>더 보기</A>]