Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Win 7 compatibility checker punts Trojan

11 May 2010   #1
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 
Win 7 compatibility checker punts Trojan

Quote:
Miscreants have disguised Trojan horse malware under the guise of a Windows 7 compatibility checker.
The malware comes as a zip-based attachment to email messages supposed offering "help" on upgrading Windows boxes. But this "Windows 7 Upgrade Advisor Setup" assistant offers only a Trojan, instead of the promised compatibility checking tool
Win 7 compatibility checker punts Trojan ? The Register


My System SpecsSystem Spec
.
11 May 2010   #2
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hi !

if you install Foxit-Reader 3.3 there is a "ASK-Installchecker" that wants to connect to internet,
its running immediately, even before showing any setup-screens.
makes you wonder what that actually is....
is perhaps related to the W7 compatibility checker ?
My System SpecsSystem Spec
11 May 2010   #3
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

That would be the "Ask Toolbar" Many programs come bundled with garbage that you don't want and don't need. This is all the junk it wants to download:
ThreatExpert Report
My System SpecsSystem Spec
.

11 May 2010   #4
CarlTR6

Windows 7 Ultimate 32 bit
 
 

I recommend that you uninstall it.
My System SpecsSystem Spec
11 May 2010   #5
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

oh yes, its going to be uninstalled later tonight.

i only installed it to check the new version, ive posted a detailed report (including screenshots !) about Foxit in this thread: https://www.sevenforums.com/system-security/83984-foxit-adds-safe-mode-counter-pdf-attacks.html

im NOT going to use it...
My System SpecsSystem Spec
11 May 2010   #6
CarlTR6

Windows 7 Ultimate 32 bit
 
 

I meant uninstall the toolbar.
My System SpecsSystem Spec
11 May 2010   #7
polarbear

Windows 7 Home Premium 64-bit
 
 

Some malware programs class the "Ask Toolbar" as adware... as posted above, uninstall the toolbar... GL
My System SpecsSystem Spec
11 May 2010   #8
Night Hawk

W7 Ultimate x64/W10 Pro x64 dual boot main build-remote pc W10 Pro x64 Insider Preview/W7 Pro x64
 
 

I always uncheck any toolbar item found when installing any new program whether it's for Ask, Google, Yahoo, or another other search engine since it opens you up for any variety of adwares or other bugs!

Another report labeled "Windows 7 'compatibility checker' is a Trojan" goes as follows.

Quote:
May 10, 2010

Windows 7 'compatibility checker' is a Trojan

A fake email with the Trojan lifts text from a Microsoft Web site about the real software

By Robert McMillan
IDG News Service

Scammers are infecting computers with a Trojan horse program disguised as software that determines whether PCs are compatible with Windows 7.

The attack was first spotted by BitDefender on Sunday and is not yet widespread; the antivirus vendor is receiving reports of about three installs per hour from its users in the U.S. But because the scam is novel, it could end up infecting a lot of people, according to Catalin Cosoi, the head of BitDefender's Online Threats Lab. "This actually works because of the interest in Windows 7," he said.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and Security Central newsletter, both from InfoWorld. ]

The scammers steal their marketing text directly from Microsoft, which offers a legitimate Windows 7 Upgrade Advisor in its Web site.
The rest is seen at Windows 7 'compatibility checker' is a Trojan | Security Central - InfoWorld
My System SpecsSystem Spec
12 May 2010   #9
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

CarlTR6 & polarbear: i have NOT installed any toolbar.
first, i let a2 block ASK-Installchecker from connecting to internet.
second, during the installation i didnt install any "extras".
the screenshots in the other thread only shows how it looks during the installation,
pointing to the danger of installing Foxit.

Jacee: thanks for the info, it seems to be a lot of BS that it wants to download.
maybe it tries to install ASK-Toolbar, but the toolbar is also offered during the installation.
My System SpecsSystem Spec
12 May 2010   #10
CarlTR6

Windows 7 Ultimate 32 bit
 
 

Good post. Thanks for the warning.

Quote   Quote: Originally Posted by Night Hawk View Post
I always uncheck any toolbar item found when installing any new program whether it's for Ask, Google, Yahoo, or another other search engine since it opens you up for any variety of adwares or other bugs!

Another report labeled "Windows 7 'compatibility checker' is a Trojan" goes as follows.

Quote:
May 10, 2010

Windows 7 'compatibility checker' is a Trojan

A fake email with the Trojan lifts text from a Microsoft Web site about the real software

By Robert McMillan
IDG News Service

Scammers are infecting computers with a Trojan horse program disguised as software that determines whether PCs are compatible with Windows 7.

The attack was first spotted by BitDefender on Sunday and is not yet widespread; the antivirus vendor is receiving reports of about three installs per hour from its users in the U.S. But because the scam is novel, it could end up infecting a lot of people, according to Catalin Cosoi, the head of BitDefender's Online Threats Lab. "This actually works because of the interest in Windows 7," he said.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and Security Central newsletter, both from InfoWorld. ]

The scammers steal their marketing text directly from Microsoft, which offers a legitimate Windows 7 Upgrade Advisor in its Web site.
The rest is seen at Windows 7 'compatibility checker' is a Trojan | Security Central - InfoWorld
My System SpecsSystem Spec
Reply

 Win 7 compatibility checker punts Trojan




Thread Tools




Similar help and support threads
Thread Forum
Trojan called 'Trojan.Generic.2582177' on my system
Hi, I have Window7 Ultimate 64 bit on my system. I use Bitfender as my antivirus software. This morning it informed me that it has found a file infected with a virus called 'Trojan.Generic.2582177' which it cannot clean. I've contacted Bitfender to see if they know what I should do but haven't...
System Security
Spell Checker in IE9?
While using Firefox I discovered that it has a great auto spell check for all web forms (this forum, facebook etc)...when I use IE9 there is no auto spell check. Is there something I should turn on to get spell check on IE9? I already have google tools and spell check turned on but no spell...
Browsers & Mail
Spell Checker for IE9
hello, i need a Spell Checker for IE9. i need it to english and hebrew plase. thank.
Browsers & Mail
PIDX checker????
Just wondering if a product key is legitimate if it passes a PID check?? I'm just very carefully weighing up all the options before I go spending a great wad of my hard earned to move up from xp as they will soon stop supporting it and what a white whale vista was. Any advice from the pros is...
General Discussion
virus checker
I have Avast but my trial is up in about 2 weeks and I want a software for 3 computer. I use to have McAfee but it really gums up your system. Anyway what would you recommend? I have a 64 bit OS if that makes a difference.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:00.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App