Monday, January 14, 2008

Fake alert for Spyware.CyberLog-X

A new round of the FakeAlert family has been released this past weekend, the same family of rogueware components that Alex Eckelberry of Sunbelt has posted. We are seeing a surge in hits for new components installed as "MultiMedia Software" codecs that result in a barrage of popups identifying "Spyware.CyberLog-X" and "Trojan-Spy.Win32@mx" on the system:



















Of course, there was no spyware on these clean lab systems prior to the codec install, and no legitimate video codecs were installed on the machine as a result of running the setup.exe program.


2 comments:

yoshizakura said...

That's what I have. How do I get rid of it and is it doing any harm while it's there??

ThreatFire Blogger said...

Hi there yoshizakura-

Sorry about the delayed response.

Infection cleanup and supports questions are actively monitored and responded to at our PC Tools community 'Spyware, Adware and Malware Discussion' forum:
http://www.pctools.com/forum/forumdisplay.php?f=5

Please post infection related comments and questions on that board. Thanks.