Signature Detail

SPYWARE: Spyblocs-Eblocs

This signature detects the runtime behavior of the spyware SpyBlocs.Eblocs, which runs as a startup program. This spyware automatically updates itself by downloading binaries from its controlling server on a regular basis, without user consent. It pretends to be a spyware-removing application, but instead downloads advertisements and other spyware onto the host system.

Extended Description

None

References

• URL: http://research.sunbelt-software.com/threat_display.cfm?name=Spyblocs.eBlocs&threatid=14993
• URL: http://www.antispyware.com/glossary_details.php?ID=1584
• URL: http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=22616