Fake Antivirus Product Keys Site

Discuss Malware removal, techniques, trends, etc. and repairing Windows after removal.
Forum rules
1. Try to give more than you take, when possible.
2. Don't be a prick.

Re: Fake Antivirus Product Keys Site

Postby GEGeek » Mon Jun 17, 2013 11:38 pm

Well I couldn't sleep and I did some research on the site I submitted earlier for evaluation.

So in keeping on topic, I would like to submit another site for evaluation.
http://freeofvirus.blogspot.com/2009/05 ... us-10.html "Remove Fake Virus


Found very mixed reviews, almost 50/50, some claim it's clean and others claim otherwise.
I downloaded it, immediately sent it to VirusTotal and it found two trojans.
I also scanned it locally with HitmanPro, Malwarebytes and Vipre - they found nothing?

What I initially liked was the listing of the locations it would clean for each fake virus, similar to the
way BleepingComputer lists it. But I just can't bring myself to trust the program right now.

My recommendation, at this time, is that it is not worth my effort to further research the effectiveness
of this tool. I'm always on the lookout for that next undiscovered gem, but I don't think this is it.

Mike
GEGeek - I don't reinvent the wheel, I just link to it.
Image
http://www.gegeek.com
GEGeek
 
Posts: 158
Joined: Wed Feb 13, 2013 8:20 am
Location: NJ

Re: Fake Antivirus Product Keys Site

Postby enderst » Wed Jun 19, 2013 1:09 am

been using that sight for a few years now.
just search it for whatever you're infected with e.g. "System Doctor 2014" enter the key. the keys are case sensitive.
after the key is entered it usually wants to perform a clean up, let it. the things that got crippled will be repaired. then typically tdsskiller and malwarebytes will clean it out.

iirc the guy that runs the site works for malwarebytes.

as far as 4 keys in 6mos, which of the rogues is he missing? thats about all thats come out since jan.

the site is a great resource.


just realized that there isn't a search on the site. i've been using google reader on my phone to search.
User avatar
enderst
 
Posts: 35
Joined: Fri Feb 08, 2013 12:23 am

Re: Fake Antivirus Product Keys Site

Postby GEGeek » Wed Jun 19, 2013 7:34 am

Good to know someone actually having success with it. Can't wait to try one of those codes now ;) Thanks for the info.
Mike
GEGeek - I don't reinvent the wheel, I just link to it.
Image
http://www.gegeek.com
GEGeek
 
Posts: 158
Joined: Wed Feb 13, 2013 8:20 am
Location: NJ

Re: Fake Antivirus Product Keys Site

Postby und3rtak3r » Wed Jun 19, 2013 9:26 am

GEGeek wrote:Good to know someone actually having success with it. Can't wait to try one of those codes now ;) Thanks for the info.
Mike

you're not Robinson crusoe on that one :) . for both sites..
The TechGuru4U
RTFM D7 here
RTFM D7II here
RTFM dSupportSuite Here


You may call me Glenn
User avatar
und3rtak3r
 
Posts: 306
Joined: Mon Mar 18, 2013 8:05 pm

Re: Fake Antivirus Product Keys Site

Postby techw13 » Tue Jul 09, 2013 6:34 pm

I bet you that site is a worse Trojan than the Trojan you are removing lol.
techw13
 
Posts: 106
Joined: Tue Jul 09, 2013 6:13 pm

Re: Fake Antivirus Product Keys Site

Postby Nick » Sat Jul 13, 2013 12:09 pm

long as we're posting, Britec offered up this one:

Internet Security 2013 Activation Key:

Y68REW-T76FD1-U3VCF5A
Author of d7x and other PC technician's tools. http://www.d7xTech.com

Image
User avatar
Nick
Site Admin
 
Posts: 2755
Joined: Mon Nov 19, 2012 7:54 pm

Re: Fake Antivirus Product Keys Site

Postby GEGeek » Sat Jul 13, 2013 10:36 pm

I was curious so I took the liberty of scanning through the last 3 years of all those Ransomware keys looking for a pattern and created a list.
These were found most often. Who knows, you copy and paste a few and might get lucky. The first two represented almost half of them.
Note: There is no search on the site. Reminder: Source = http://siri-urz.blogspot.fr/

0W000-000B0-00T00-E0020
AA39754E-715219CE
Y78REW-T54FD1-U2VCF4A
Y86REW-T75FD5-U9VBF4A
Y68REW-T76FD1-U3VCF5A
Y76REW-T65FD5-U7VBF5A
3425-814615-3990
1089-903874-1875
08467206738602987934024759008355
08869246386344953972969146034087
8F42D6E3-FD18
9992665263
9443-077673-5028
9YW1-KI7D-V7GG2
56723489134092874867245789235982
U2FD-S2LA-H4KA-UEPB
15801587234612645205224631045976
LIC-99D0-1239-KJAS-354S-SQD4-CJKF-KF67-GJ78-FGHK-ZDU6
LIC2-00A6-234C-B6A9-38F8-F6E2-0838-F084-E235-6051-18B3
64C665BE-4DE7-423B-A6B6-BC0172B25DF2
D13F-3B7D-B3C5-BD84
1203978628012489708290478989147
8945315-6548431
DB038748-B4659586-4A1071AF-32E768CD-36005B1B-F4520642-3000BF2A-04FC910B
8475082234984902023718742058948
MTk4-NzE1-NTYx-NTUw
xOxZxLxWxIxTxFxQxCxNxYxKxVxHxSxE
2233-298080-3424
SL55J-T54YHJ61-YHG88

Enjoy!
GEGeek - I don't reinvent the wheel, I just link to it.
Image
http://www.gegeek.com
GEGeek
 
Posts: 158
Joined: Wed Feb 13, 2013 8:20 am
Location: NJ

Re: Fake Antivirus Product Keys Site

Postby Nick » Mon Jul 15, 2013 8:40 am

nice list, thanks!
Author of d7x and other PC technician's tools. http://www.d7xTech.com

Image
User avatar
Nick
Site Admin
 
Posts: 2755
Joined: Mon Nov 19, 2012 7:54 pm

Previous

Return to Malware Removal