Symptoms
- Existence of Registry.
- Outgoing traffic to remote server:
- virtumonde.com
- Displays fake error messages asking the user to download system security tools.
"The Malware Block List is a free, automated and user contributed system for checking URLs for the presence of Viruses, Trojans, Worms, or any other software considered Malware. The list is available in 29 formats. If you need other format please let us know." from www.malware.com.br
To find out more info on the malware block list visit www.malware.com.br
