Macy’s, Costco brand names used by Rogueware

Recently we have received e-mails which leads to new Rogueware infection and the e-mail are sent using well known brand names like Macy’s, Costco Photo Center.

E-mail contains a below URL which is a fake online scanner and it offers you to download file antivirus_2.exe later on.

hxxp://ho[xxxx]ami.cz.cc/scanner5/?afid=24

The file “antivirus_2.exe” downloads and installs Rogueware “Desktop Security 2010” on the user’s system, which looks like below

Quick Heal detects the Rogueware as “Desktop Security 2010”.