[news] Fake Norton AV

This was on my friend's computer (without any AV engine), process named svchost.exe started from SYSTEM user.

 

Безымянный1.png

 

This funny text is on Russian. Translation to english is like that:

Attention!

Norton AntiVirus is working in intensive defense mode.

This is temporary action, needed for zero-time reaction

for threats from malware side. (from the author: here I imagine a war-front on the real land with something like armed automated system from one side and like enemy agents, trojans, rootkits armed with machineguns and grenades from other side, holding their terrotory defense :))))) )

No actions needed from You. (from author: here I imagine very long war-front there hundreds and thousands of items taking part in this war :)) )

 

So fun text))))

 

Here the tasklist of processes: as you can see there are no original Norton's processes (two ccSvcHst.exe)

 

Безымянный2.png