{"id":5651,"date":"2012-07-06T09:59:15","date_gmt":"2012-07-06T06:59:15","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=5651"},"modified":"2012-07-06T09:59:15","modified_gmt":"2012-07-06T06:59:15","slug":"anti-phishing-domain-advisor","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/security-tools\/anti-phishing-domain-advisor\/anti-phishing-domain-advisor.htm","title":{"rendered":"Anti-phishing Domain Advisor"},"content":{"rendered":"

\"\"<\/p>\n

Anti-phishing Domain Advisor<\/h1>\n

http:\/\/software.visicommedia.com\/en\/products\/antiphishing\/<\/a><\/p>\n

he Anti-phishing Domain Advisor ensures you navigate the Web safely by protecting you from “phishing sites” (copycats of legitimate sites that steal your personal info) or “malware sites” designed to harm your computer.
\nThe Anti-phishing Domain Advisor is continuously checking sites that you visit against a list of reported phishing and malware sites. The list is provided by Panda Security – one of the world’s leading IT security provider – and is updated every 5-20 minutes.<\/p>\n

This software does not change the Windows boot time.<\/strong><\/p>\n

VISICOM_ANTIPHISHING.EXE<\/strong><\/a>
\nDescription: Visicom Media Anti-phishing Domain Advisor (Powered by Panda Security) Visicom Media Inc. (Powered by Panda Security) Anti-phishing Domain Advisor 1.0<\/strong>
\nMD5= DBD1DD57984CCBC44586CC6DE16F45D7<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 217256<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\ANTI-PHISHING DOMAIN ADVISOR: “”%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\VISICOM_ANTIPHISHING.EXE<\/strong>“”<\/div>\n

<\/p>\n

Modified during installation:<\/strong><\/div>\n

~+ [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW2.MYSTART.COM\/?PR=VMN&ID=VMNANTIPHISHING_AD&V=1_0_1_30
\n~- [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW.GOOGLE.COM\/<\/p>\n

<\/div>\n

FILES ADDED:6<\/strong><\/p>\n

%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\GUID.DAT
\n%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\UNINSTALL.EXE<\/strong>
\n%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\VISICOM_ANTIPHISHING-TRAY.EXE<\/strong><\/a>
\n%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\VISICOM_ANTIPHISHING.DLL<\/strong><\/a>
\n%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR\\VISICOM_ANTIPHISHING.EXE<\/strong><\/a>
\n%PROGRAM FILES%\\MOZILLA FIREFOX\\SEARCHPLUGINS\\ADAVAS3.XML<\/div>\n
<\/div>\n

FILES DELETED:3<\/strong><\/p>\n

%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\EOWSE1HO.DEFAULT\\SEARCH.JSON
\n%PROGRAM FILES%\\MOZILLA FIREFOX\\SEARCHPLUGINS\\YAHOO.XML
\n%PROGRAM FILES%\\MOZILLA MAINTENANCE SERVICE\\MAINTENANCESERVICE_TMP.EXE<\/strong><\/div>\n
<\/div>\n

FILES[ATTR]MODIFIED:9<\/strong><\/p>\n

%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\EOWSE1HO.DEFAULT\\PREFS.JS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\FEEDSSTORE.FEEDSDB-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT HOME~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT WORK~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\INTERNET EXPLORER SUGGESTED SITES~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WEBSLICES~\\WEB SLICE GALLERY~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS CACHE\\INDEX.DAT
\n%TEMP%\\CE4CF87733651BF1F44DD1E02FC1A8E8
\n%WinDir%\\TASKS\\USER_FEED_SYNCHRONIZATION-{600E3BA8-8EF5-4554-94FE-DB90950D3DEB}.JOB<\/div>\n
<\/div>\n

FOLDERS ADDED:3<\/strong><\/p>\n

%LOCAL APPDATA%\\VMNANTIPHISHING_AD
\n%LOCAL APPDATA%\\VMNANTIPHISHING_AD\\DATA
\n%COMMON APPDATA%\\ANTI-PHISHING DOMAIN ADVISOR<\/div>\n
<\/div>","protected":false},"excerpt":{"rendered":"

Anti-phishing Domain Advisor http:\/\/software.visicommedia.com\/en\/products\/antiphishing\/ he Anti-phishing Domain Advisor ensures you navigate the Web safely by protecting you from “phishing sites” (copycats of legitimate sites that steal your personal info) or “malware sites” designed to harm your computer. The Anti-phishing Domain Advisor is continuously checking sites that you visit against a list of reported phishing and […]
More…<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4259],"tags":[8429],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5651"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=5651"}],"version-history":[{"count":0,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5651\/revisions"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=5651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=5651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=5651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}