Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Rogue:MSIL/Zeven wants a piece of the M S E's pie

01 Sep 2010   #1

Win 7 Ultimate 64-bit. SP1.
Rogue:MSIL/Zeven wants a piece of the M S E's pie


A new rogue has started making its appearance from compromised websites: Rogue:MSIL/Zeven. We received a sample (70be8ca73142922fd78acf2aafa9f141a977f15a) and a URL and began our investigation.

Let us say from the beginning that the guys behind this rogue like to copy big-time. They start by auto-detecting what browser the user is currently using, and then faking the malware warning page if the browser is Internet Explorer, Chrome, or Firefox. This is meant to be a social engineering scheme in order to trick the user into downloading and installing the rogue, relying on the user’s trust of his day-to-day browser.

The similarity between the fake warning pages is so accurate that it can trick even highly trained eyes.

In the Firefox page, for example, you can see it’s not the real warning page because they misspelled ‘out’ and wrote ‘Get me our of here’.

But for all three browsers, a common indication that you are not looking at the actual browser warning is the offer of some sort of an “update” or “solution”. All the “updates” point to a copy of MSIL/Zeven that promises to provide “a new approach to windows detection”. Internet Explorer, Firefox, and Chrome do not offer such a solution when a website is blocked.

More -
Rogue:MSIL/Zeven wants a piece of the Microsoft Security Essentials pie - Microsoft Malware Protection Center - Site Home - TechNet Blogs

My System SpecsSystem Spec
02 Sep 2010   #2

Windows 7 Ultimate x64 SP1


I just came across this on another site & found this image as well, I find it very amusing that these people can create stuff like this but can't even spell simple words correctly, if you can see the image below they have written THREADS instead of THREATS, not once but 10 times LOL!

My System SpecsSystem Spec

 Rogue:MSIL/Zeven wants a piece of the M S E's pie

Thread Tools

Similar help and support threads
Thread Forum
piece by piece upgrade of an old computer?
hi i lately got a 500W psu from my father who got it from his job becouse they didnt need it, now that my power problems in my computer is out of the way, i figured that i accually can get a good gpu! i can soon afford an GTX 660 or a GTX 650Ti but my cpu is an old amd phenom x3 2.4Ghz and my...
PC Custom Builds and Overclocking
A piece of history
One of my Heroes. He went places and did things that nobody else would or could that why all kills were not confirmed by others. The NVA put what they considered a Kings ransom for anybody that could kill him. A short film. lnKvyrMf9EE
Chillout Room
Facebook being a piece of crap
Never liked facebook in the first place, started using it cuz people at work use it. All started well.. Now, what ever browser its in, the facebook screen freezes, I can switch tabs and do anything else on those, but the facebook screen is un-usable, can't type in any box or press any links,...
Browsers & Mail
Need a little piece of website code
Hey guys, So, I'm working on the new website for the organization that I work for, and it's coming along really well. The problem that I am having is that, while I know html inside and out, I pretty much know nothing about Java. What I need is a bit of code where I can have a link that will take...
Chillout Room
So you want your next piece of kit FOR FREE
Hi all I've been stuck at home for nearly a week waiting for non existent planes to fly back to work:cry: -- but I haven't been wasting my time. In fact the idea is SO SIMPLE that I can't believe it's not more well known -- even when I explain the system in the pub people look with astonishment...
Chillout Room

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 18:36.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App