Sunbeltblog reported about new adware – pornmagpass. There’s a new adware detected some AV engines as trojan:
AVG – Downloader.Zlob.AOI
ClamAV – Trojan.Downloader.Zlob-471
EtrustVet – Win32/Beovens.FT
Fortinet – suspicious
Ikarus – Trojan-Downloader.Win32.Zlob.ni
The EULA says:
SOFTWARE INSTALLATION: Components bundled with our software may report to Licensor and/or its affiliates the installation status of certain marketing offers, such as toolbars, and also generalized installation information, such as language preference and operating system version, to assist Licensor in its product development. No personal information will be communicated to PORNMAGPASS or its affiliates during this process. Licensor may change homepage on user’s computer and may offer additional components through our version of checking/update system. These components include: toolbar, popup ads manager, advertisements messenger, pc protection software, shortcuts manager.
After run, this trojan will install rogue antispyware SpywareQuake and adds a new IE Toolbar called “Safety Bar”.
As a final note, pornmagpass malware site hosted by Intercage, the Best Friend Ever of all malware authors.
Read more: PornMagPass — your pass to hell
