adding app used by fake MS cold callers???

[flagpole]

There are lots of people doing this these days, cold calling, saying they are from MS offering to fix* your computer.

* - by fix i mean install malware and rob your bank details.

following this thread:

i've become aware, not for the first time, of a company helppconline.com inviting people to download an app called swift pc health check:

i've looked at this app as best i can, from what i can tell it doesn't do anything too harmful, though it does make changes to index.dat, and establish a tcp connection, though i think the latter maybe just to get the external IP. but to be honest i don't have the skills to look any further.

i'm wondering if there would be anyway of getting this threat looked at by someone who knows what they are doing. and even if there is no technical threat, given what it is used for getting it added to the definitions anyway?

any thoughts appreciated.

Edited September 22, 2010 by AdvancedSetup
External advertising links removed

[noknojon]

Hi and Welcome -

Thank you for the advice - I hope you are smart enough not to ever be caught , but many do -

If you think you have been caught , and infected by these people , then our Malware Removal forum area can help you -

We do not charge , but please be patient as our volunteer experts can get busy at times - Just follow these instructions -

If not then I will get this topic moved to General Information area - Please let me know if you do need help -

As we do not work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow What do I do now? , skipping any steps you are unable to complete.

The next step is post a New Topic Here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that

you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via This Link

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

Edited to include the top line - This response was posted just in case you or a mate had been caught - Read Security Alert Area of the Forum

[flagpole]

thanks for the reply.... (though in the nicest possible way you don't appear to have really read my message, i know this happens because you are used to copying and pasting the same answer 100 times a day but....)

to be clear. i have not been caught out. I'm smarter than that.

i'm just saying that i have become aware of cold callers asking people to install this file. and whilst under my rudimentary analysis (running sandboxed in a VM, looking for changes in files and the reg,) it appears clean i wondered if it would be better looked at by someone professional. and possibly being included in the mbam definitions.

[AdvancedSetup]

You can submit samples in one of the research forums.

Thanks.