In the recent FAKEAV spam campaign, I realized something was off. Once the user clicks the URL and gets the bogus Antivirus 2010 up and running on the system, additional files are added. The files I found added are related to ClamAV, the open source AV toolkit for UNIX. The files include the ClamAV [...]
