<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Webroot Threat Blog &#187; adware</title>
	<atom:link href="http://blog.webroot.com/category/adware/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.webroot.com</link>
	<description>WEBROOT - INSIGHTS INTO THREATS AND TRENDS FROM OUR INTERNET SECURITY EXPERTS</description>
	<lastBuildDate>Sat, 11 Feb 2012 02:04:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='blog.webroot.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://0.gravatar.com/blavatar/2f6f528880dcd9039e50bf3a1b6b8a40?s=96&#038;d=http%3A%2F%2Fs2.wp.com%2Fi%2Fbuttonw-com.png</url>
		<title>Webroot Threat Blog &#187; adware</title>
		<link>http://blog.webroot.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://blog.webroot.com/osd.xml" title="Webroot Threat Blog" />
	<atom:link rel='hub' href='http://blog.webroot.com/?pushpress=hub'/>
		<item>
		<title>ZeroAccess Rootkit Guards Itself with a Tripwire</title>
		<link>http://blog.webroot.com/2011/07/08/zeroaccess-rootkit-guards-itself-with-a-tripwire/</link>
		<comments>http://blog.webroot.com/2011/07/08/zeroaccess-rootkit-guards-itself-with-a-tripwire/#comments</comments>
		<pubDate>Fri, 08 Jul 2011 19:40:33 +0000</pubDate>
		<dc:creator>Marco Giuliani</dc:creator>
				<category><![CDATA[Ad-clickers]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Destructive behavior]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[%Windir%\system32\config]]></category>
		<category><![CDATA[Max++]]></category>
		<category><![CDATA[p:\vc5\release\_uac.pdb]]></category>
		<category><![CDATA[ZeroAccess]]></category>
		<category><![CDATA[\Device\svchost.exe\svchost.exe]]></category>
		<category><![CDATA[\\Globalroot\Device\svchost.exe\svchost.exe]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4657</guid>
		<description><![CDATA[By Marco Giuliani The latest generation of a rapidly evolving family of kernel-mode rootkits called, variously, ZeroAccess or Max++, seems to get more powerful and effective with each new variant. The rootkit infects a random system driver, overwriting its code with its own, infected driver, and hijacks the storage driver chain in order to hide [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4657&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/07/08/zeroaccess-rootkit-guards-itself-with-a-tripwire/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">eraserpx</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2004.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2014.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2024.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2034.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2044.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2054.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2064.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2074.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2084.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2094.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2104.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2114.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_kills_process.jpg" medium="image">
			<media:title type="html">20110707_zeroaccessZA_kills_process</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_path.jpg" medium="image">
			<media:title type="html">20110707_zeroaccessZA_path</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_namegen.jpg" medium="image">
			<media:title type="html">20110707_zeroaccessZA_namegen</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_domains.png" medium="image">
			<media:title type="html">20110707_zeroaccessZA_domains</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_filesystem_crop.png" medium="image">
			<media:title type="html">20110707_zeroaccessZA_filesystem_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110707_zeroaccessza_process_check_crop.png" medium="image">
			<media:title type="html">20110707_zeroaccessZA_process_check_crop</media:title>
		</media:content>
	</item>
		<item>
		<title>Malware Load Points Raise the Complexity Bar</title>
		<link>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/</link>
		<comments>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/#comments</comments>
		<pubDate>Thu, 09 Jun 2011 16:09:16 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Ad-clickers]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Firefox]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[Search engines]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[%appdata%]]></category>
		<category><![CDATA[auto-start locations]]></category>
		<category><![CDATA[Batserv]]></category>
		<category><![CDATA[conima.exe]]></category>
		<category><![CDATA[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]]></category>
		<category><![CDATA[HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\classes\exefile\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\firefox.exe\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\iexplore.exe\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run]]></category>
		<category><![CDATA[load points]]></category>
		<category><![CDATA[Local Account Authority Service]]></category>
		<category><![CDATA[LocalAccountAuthority.bat]]></category>
		<category><![CDATA[lssas.exe]]></category>
		<category><![CDATA[manager.exe]]></category>
		<category><![CDATA[rogue antivirus]]></category>
		<category><![CDATA[Run Key]]></category>
		<category><![CDATA[start points]]></category>
		<category><![CDATA[Trojan-Clicker-Batserv]]></category>
		<category><![CDATA[Windows auto-start locations]]></category>
		<category><![CDATA[windows load points]]></category>
		<category><![CDATA[Windows start points]]></category>
		<category><![CDATA[Wireshark Antivirus]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4496</guid>
		<description><![CDATA[By Andrew Brandt When malware ends up on an infected machine, one of the first things it will do is to ensure that it will start up again after the victim reboots their computer. For a criminal it makes sense. After all, what good is malware that stops working after a reboot? In Windows, there [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4496&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-service2_crop.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-service2_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-logo.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-window.png?w=300" medium="image">
			<media:title type="html">20110608_runkey_rogue-window</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-detections.png?w=300" medium="image">
			<media:title type="html">20110608_runkey_rogue-detections</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-systraywarning.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-systraywarning</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-qtupdateserv_crop.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-qtupdateserv_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-downloader_crop.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-downloader_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker_install-procexp.png" medium="image">
			<media:title type="html">20110608_runkey_clicker_install-procexp</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-lssas_service.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-lssas_service</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-lssas_bat.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-lssas_bat</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Chinese Android Trojan Texts Premium Numbers</title>
		<link>http://blog.webroot.com/2011/05/11/chinese-android-trojan-texts-premium-numbers/</link>
		<comments>http://blog.webroot.com/2011/05/11/chinese-android-trojan-texts-premium-numbers/#comments</comments>
		<pubDate>Wed, 11 May 2011 19:42:24 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Android]]></category>
		<category><![CDATA[Dialers]]></category>
		<category><![CDATA[Mobile security]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[3D Cube horror terrible]]></category>
		<category><![CDATA[Android Trojan]]></category>
		<category><![CDATA[Android/Trojan.SMS.ZSones]]></category>
		<category><![CDATA[iBook]]></category>
		<category><![CDATA[iCalendar]]></category>
		<category><![CDATA[iCartoon]]></category>
		<category><![CDATA[iGuide]]></category>
		<category><![CDATA[iMatch 对对碰]]></category>
		<category><![CDATA[iMine]]></category>
		<category><![CDATA[LoveBaby]]></category>
		<category><![CDATA[Sea Ball]]></category>
		<category><![CDATA[Shake Break]]></category>
		<category><![CDATA[ShakeBanger]]></category>
		<category><![CDATA[TRxAO]]></category>
		<category><![CDATA[zsone]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4356</guid>
		<description><![CDATA[By Andrew Brandt and Armando Orozco A Trojaned application that displays a cutesy image of a 2011 calendar on an Android device&#8217;s desktop comes with a nasty surprise: The app sends text messages to a premium service that charges the phone&#8217;s owner money. As first reported by the Taiwan-based AegisLab, a single developer, which went [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4356&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/05/11/chinese-android-trojan-texts-premium-numbers/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_icon.png" medium="image">
			<media:title type="html">20110511_android_ical_icon</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_appimage.png?w=179" medium="image">
			<media:title type="html">20110511_android_ical_appimage</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_crash.png" medium="image">
			<media:title type="html">20110511_android_ical_crash</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_sendsms_crop.png" medium="image">
			<media:title type="html">20110511_android_ical_sendsms_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_abortbroadcast_crop.png" medium="image">
			<media:title type="html">20110511_android_ical_abortbroadcast_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110511_android_ical_sendemptymessage.png" medium="image">
			<media:title type="html">20110511_android_ical_sendemptymessage</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Korean Rogues&#8217; Slapfight Bonanza</title>
		<link>http://blog.webroot.com/2011/04/11/korean-rogues-slapfight-bonanza/</link>
		<comments>http://blog.webroot.com/2011/04/11/korean-rogues-slapfight-bonanza/#comments</comments>
		<pubDate>Tue, 12 Apr 2011 03:40:34 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Antiguard]]></category>
		<category><![CDATA[Bootcare]]></category>
		<category><![CDATA[Smartscan]]></category>
		<category><![CDATA[TRxDP]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4230</guid>
		<description><![CDATA[By Andrew Brandt The other day, Threat Reseacher Dan Para sent along the video clip below, which gave us all a good laugh. Dan had been researching a Korean-language Trojan downloader, but when he ran the file, he didn&#8217;t expect the downloader to retrieve not one&#8230;not two&#8230;but three separate rogue antivirus products. The most amusing [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4230&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/04/11/korean-rogues-slapfight-bonanza/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2004.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2014.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2024.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2034.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2044.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2054.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2064.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2074.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2084.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2094.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2104.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2114.png" medium="image" />
	</item>
		<item>
		<title>Pinball Corp&#8217;s Appbundler Employs Malware-like Techniques</title>
		<link>http://blog.webroot.com/2011/03/29/pinball-corps-appbundler-employs-malware-like-techniques/</link>
		<comments>http://blog.webroot.com/2011/03/29/pinball-corps-appbundler-employs-malware-like-techniques/#comments</comments>
		<pubDate>Tue, 29 Mar 2011 19:44:29 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Passwords]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[social networks]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[180Solutions]]></category>
		<category><![CDATA[appbundler]]></category>
		<category><![CDATA[appbundler.com]]></category>
		<category><![CDATA[appbundler.net]]></category>
		<category><![CDATA[clickpotato]]></category>
		<category><![CDATA[clickpotato.tv]]></category>
		<category><![CDATA[Download Now]]></category>
		<category><![CDATA[Download the XviD Codec]]></category>
		<category><![CDATA[facebookonlinegiriss.tr.gg]]></category>
		<category><![CDATA[fake codec]]></category>
		<category><![CDATA[fake Facebook]]></category>
		<category><![CDATA[fake video]]></category>
		<category><![CDATA[fake xvid]]></category>
		<category><![CDATA[fake YouTube]]></category>
		<category><![CDATA[HORRIBLE! a young girl did SUICIDE in front of cam - Watched this video!]]></category>
		<category><![CDATA[icr01.appbundler.net]]></category>
		<category><![CDATA[megaplayerhd.com]]></category>
		<category><![CDATA[Onvertise]]></category>
		<category><![CDATA[Pinball Corp.]]></category>
		<category><![CDATA[Play Now]]></category>
		<category><![CDATA[TouTube]]></category>
		<category><![CDATA[xvid Premium Setup Wizard]]></category>
		<category><![CDATA[XviD Video]]></category>
		<category><![CDATA[XvidSetup.exe]]></category>
		<category><![CDATA[Zango]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4151</guid>
		<description><![CDATA[By Andrew Brandt For a couple of weeks now, I&#8217;ve been noticing a curious (and increasingly prevalent) phenomenon: Some of the free Web hosts popular among those who engage in phishing are popping new types of multimedia ads over the tops of the pages they host. Not only does the victim, in this case, risk [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4151&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/03/29/pinball-corps-appbundler-employs-malware-like-techniques/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2003.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2013.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2023.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2033.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2043.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2053.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2063.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2073.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2083.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2093.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2103.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2113.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_opener.png" medium="image">
			<media:title type="html">20110328_appbundler_opener</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_fake_youtube_page_crop.png" medium="image">
			<media:title type="html">20110328_appbundler_fake_youtube_page_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_facebook-phishing-page-with-ad_cropreduced.png" medium="image">
			<media:title type="html">20110328_appbundler_facebook-phishing-page-with-ad_crop+reduced</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_missing_vlc_plugin_crop2.png" medium="image">
			<media:title type="html">20110328_appbundler_missing_vlc_plugin_crop2</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_xvidsetup-download_crop.png" medium="image">
			<media:title type="html">20110328_appbundler_xvidsetup-download_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_megaplayerhd_xvid.png?w=300" medium="image">
			<media:title type="html">20110328_appbundler_megaplayerhd_xvid</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_megaplayerhd_xvid-download.png?w=300" medium="image">
			<media:title type="html">20110328_appbundler_megaplayerhd_xvid-download</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_bogus_digsig.png" medium="image">
			<media:title type="html">20110328_appbundler_bogus_digsig</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_setup1_obs.png?w=300" medium="image">
			<media:title type="html">20110328_appbundler_setup1_obs</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110328_appbundler_setup1_view-the-offer.png" medium="image">
			<media:title type="html">20110328_appbundler_setup1_view-the-offer</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Spammed YouTube Comments Promote Adware &#8211; Successfully</title>
		<link>http://blog.webroot.com/2011/03/08/spammed-youtube-comments-promote-adware-successfully/</link>
		<comments>http://blog.webroot.com/2011/03/08/spammed-youtube-comments-promote-adware-successfully/#comments</comments>
		<pubDate>Tue, 08 Mar 2011 22:43:01 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Blackhat SEO]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Search engines]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[social networks]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[bit.ly]]></category>
		<category><![CDATA[bittorrent]]></category>
		<category><![CDATA[Contactprivacy.com]]></category>
		<category><![CDATA[fake video]]></category>
		<category><![CDATA[isohunt]]></category>
		<category><![CDATA[LeechTV]]></category>
		<category><![CDATA[leechtv.com]]></category>
		<category><![CDATA[the complête leekêd-film]]></category>
		<category><![CDATA[the social network]]></category>
		<category><![CDATA[this entîre leekêd-movìe]]></category>
		<category><![CDATA[Tucows.com]]></category>
		<category><![CDATA[YouTube]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4049</guid>
		<description><![CDATA[(Update, July 11, 2011:  On May 25, 2011, we were contacted by representatives of Future Ads, LLC, the parent company of both Playsushi and Gamevance.  Future Ads informed us that they, too, had been victims of a scam perpetrated by rogue affiliates who seemed to be involved with the malicious campaigns we described in this [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4049&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/03/08/spammed-youtube-comments-promote-adware-successfully/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2002.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2012.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2022.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2032.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2042.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2052.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2062.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2072.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2082.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2092.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2102.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2112.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_1_youtube_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_1_youtube_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_bitly_alltime_cropcrop.png" medium="image">
			<media:title type="html">20110308_gamevance_bitly_alltime_cropcrop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_3_leechtv_frontpage_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_3_leechtv_frontpage_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_leechtv_fakevid_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_leechtv_fakevid_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_4_leechtv_moviestart_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_4_leechtv_moviestart_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_5_leechtv_playfrogger_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_5_leechtv_playfrogger_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_6_playfroggernow.png" medium="image">
			<media:title type="html">20110308_gamevance_6_playfroggernow</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_7_konami_frogger_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_7_konami_frogger_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_8_stillwaiting_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_8_stillwaiting_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_9_downloadlink_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_9_downloadlink_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_10_cpaleadlink_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_10_cpaleadlink_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_11_torrent_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_11_torrent_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110308_gamevance_11_torrentlink_crop.png" medium="image">
			<media:title type="html">20110308_gamevance_11_torrentlink_crop</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Shorty Worm Spams Links, Hijacks Browsers</title>
		<link>http://blog.webroot.com/2011/03/04/shorty-worm-spams-links-hijacks-browsers/</link>
		<comments>http://blog.webroot.com/2011/03/04/shorty-worm-spams-links-hijacks-browsers/#comments</comments>
		<pubDate>Fri, 04 Mar 2011 16:51:08 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Backdoors]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Firefox]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[Search engines]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[1.exe]]></category>
		<category><![CDATA[articleslot.info]]></category>
		<category><![CDATA[diggarticle.com]]></category>
		<category><![CDATA[digitword.com]]></category>
		<category><![CDATA[domredi.com]]></category>
		<category><![CDATA[easynetseek.com]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[fotosdelinkz.net]]></category>
		<category><![CDATA[gardenpics.com]]></category>
		<category><![CDATA[golynta.com]]></category>
		<category><![CDATA[PIC976242742133-JPG-www.facebook.com.exe]]></category>
		<category><![CDATA[qoolsearch.info]]></category>
		<category><![CDATA[shortplacez.net]]></category>
		<category><![CDATA[TRxGM]]></category>
		<category><![CDATA[Worm-IM-Shorty]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=3991</guid>
		<description><![CDATA[By Andrew Brandt &#38; Grayson Milbourne A novel worm we&#8217;re calling Worm-IM-Shorty appears to be winding its way through Facebook and some instant messaging services, with its come-on disguised as a link to a photograph hosted elsewhere. But when recipients click the link, they receive an executable Trojan instead, dressed up with the name and [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=3991&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/03/04/shorty-worm-spams-links-hijacks-browsers/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2002.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2012.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2022.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2032.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2042.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2052.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2062.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2072.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2082.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2092.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2102.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2112.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_icon.png" medium="image">
			<media:title type="html">20110302_shorty_icon</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_yim_crop.png" medium="image">
			<media:title type="html">20110302_shorty_YIM_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_proc.png" medium="image">
			<media:title type="html">20110302_shorty_proc</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_fbinject_crop.png" medium="image">
			<media:title type="html">20110302_shorty_fbinject_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_msgpop.png" medium="image">
			<media:title type="html">20110302_shorty_msgpop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_yim2_crop.png" medium="image">
			<media:title type="html">20110302_shorty_YIM2_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_homepagehijack.png" medium="image">
			<media:title type="html">20110302_shorty_homepagehijack</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-qls_crop.png" medium="image">
			<media:title type="html">20110302_shorty_hj-qls_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-dga_crop.png" medium="image">
			<media:title type="html">20110302_shorty_hj-dga_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-ens_crop.png" medium="image">
			<media:title type="html">20110302_shorty_hj-ens_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-dgw_crop.png" medium="image">
			<media:title type="html">20110302_shorty_hj-dgw_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-art_crop2.png" medium="image">
			<media:title type="html">20110302_shorty_hj-art_crop2</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_hj-a2a_crop.png" medium="image">
			<media:title type="html">20110302_shorty_hj-a2a_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_download_crop.png" medium="image">
			<media:title type="html">20110302_shorty_download_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_shortplacez_whois_crop.png?w=300" medium="image">
			<media:title type="html">20110302_shorty_shortplacez_whois_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_golynto_whois_crop.png?w=300" medium="image">
			<media:title type="html">20110302_shorty_golynto_whois_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_gardenpics_whois_crop.png?w=300" medium="image">
			<media:title type="html">20110302_shorty_gardenpics_whois_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/03/20110302_shorty_fotosdelinkz_whois_crop.png?w=300" medium="image">
			<media:title type="html">20110302_shorty_fotosdelinkz_whois_crop</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Chinese Trojan Turns Infected PCs Into Web Servers</title>
		<link>http://blog.webroot.com/2010/12/04/chinese-trojan-turns-infected-pcs-into-web-servers/</link>
		<comments>http://blog.webroot.com/2010/12/04/chinese-trojan-turns-infected-pcs-into-web-servers/#comments</comments>
		<pubDate>Sat, 04 Dec 2010 15:39:48 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Ad-clickers]]></category>
		<category><![CDATA[Backdoors]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[adodb.dll]]></category>
		<category><![CDATA[b58b7a32-025c-45a4-8db0-c7beabce0005]]></category>
		<category><![CDATA[crsase.exe]]></category>
		<category><![CDATA[httpd.exe]]></category>
		<category><![CDATA[LinkPay.aspx]]></category>
		<category><![CDATA[Mixload.dll]]></category>
		<category><![CDATA[Mixload.txt]]></category>
		<category><![CDATA[My_26150.exe]]></category>
		<category><![CDATA[pay.aspx]]></category>
		<category><![CDATA[svehcet.exe]]></category>
		<category><![CDATA[taobao.lylwc.com]]></category>
		<category><![CDATA[Taobao_netking_master_1]]></category>
		<category><![CDATA[Taobatuo]]></category>
		<category><![CDATA[tencenc]]></category>
		<category><![CDATA[Trojan-Backdoor-Graypigeon]]></category>
		<category><![CDATA[Trojan-Taobatuo]]></category>
		<category><![CDATA[www.shzpay.com]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=3659</guid>
		<description><![CDATA[By Andrew Brandt A complex and elaborately conceived family of malware that originates in China installs the Apache Web server, as well as half a dozen keylogger and downloader payloads, disguised as components of legitimate apps. We and a few other antivirus vendors are calling this type of malware Taobatuo. It just so happens that [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=3659&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2010/12/04/chinese-trojan-turns-infected-pcs-into-web-servers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_payloads.png" medium="image">
			<media:title type="html">20101203_taobatuo_payloads</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_qvodprogramupdate.png" medium="image">
			<media:title type="html">20101203_taobatuo_qvodprogramupdate</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_mixload_strings_crop.png" medium="image">
			<media:title type="html">20101203_taobatuo_mixload_strings_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_inifile.png" medium="image">
			<media:title type="html">20101203_taobatuo_inifile</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_inifile_trans_crop.png" medium="image">
			<media:title type="html">20101203_taobatuo_inifile_trans_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/12/20101203_taobatuo_regex.png" medium="image">
			<media:title type="html">20101203_taobatuo_regex</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Five Reasons You Should Always &#8220;Stop. Think. Connect.&#8221;</title>
		<link>http://blog.webroot.com/2010/10/04/five-reasons-you-should-always-stop-think-connect-2/</link>
		<comments>http://blog.webroot.com/2010/10/04/five-reasons-you-should-always-stop-think-connect-2/#comments</comments>
		<pubDate>Mon, 04 Oct 2010 16:27:51 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Blackhat SEO]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Destructive behavior]]></category>
		<category><![CDATA[Firefox]]></category>
		<category><![CDATA[Gaming threats]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[Online shopping threats]]></category>
		<category><![CDATA[Passwords]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[Search engines]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[social networks]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[Website owners]]></category>
		<category><![CDATA[Stop. Think. Connect]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=3427</guid>
		<description><![CDATA[By Andrew Brandt Today&#8217;s the official kickoff for National Cyber Security Awareness Month, and the organizations supporting the event, including the National Cyber Security Alliance, the Anti-Phishing Working Group, and dozens of corporate citizens including Webroot, want you to protect your computer and your personal information. So they&#8217;ve come up with a three word campaign [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=3427&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2010/10/04/five-reasons-you-should-always-stop-think-connect-2/feed/</wfw:commentRss>
		<slash:comments>19</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2010/10/20101004_stc_big.jpg?w=300" medium="image">
			<media:title type="html">20101004_stc_big</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_securityalertdialog.jpg" medium="image">
			<media:title type="html">20100924_fakealert_securityalertdialog</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/01/20100128-dataprivacy-koobpost.jpg" medium="image">
			<media:title type="html">20100128-dataprivacy-koobpost</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/06/20100611_tacticlol_spam1_clean_crop.jpg" medium="image">
			<media:title type="html">20100611_tacticlol_spam1_clean_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/02/20100205_socspam_fbrubride.jpg" medium="image">
			<media:title type="html">20100205_socspam_fbrubride</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/10/20101004_stopthink_xbox360phish_crop.jpg" medium="image">
			<media:title type="html">20101004_stopthink_xbox360phish_crop</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Newsflash: HTML Spammers are Not So Bright</title>
		<link>http://blog.webroot.com/2010/09/27/newsflash-html-spammers-are-not-so-bright/</link>
		<comments>http://blog.webroot.com/2010/09/27/newsflash-html-spammers-are-not-so-bright/#comments</comments>
		<pubDate>Mon, 27 Sep 2010 17:12:42 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[adware]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Backdoor.Perl.AEI.20]]></category>
		<category><![CDATA[Email-Worm.Win32.Eyeveg.b]]></category>
		<category><![CDATA[Email-Worm.Win32.Myd]]></category>
		<category><![CDATA[Email-Worm.Win32.Net]]></category>
		<category><![CDATA[Hard Disc Drivers]]></category>
		<category><![CDATA[Javascript]]></category>
		<category><![CDATA[Javascript fakealert]]></category>
		<category><![CDATA[Lemena.3544]]></category>
		<category><![CDATA[Macro.PPoint.Attach]]></category>
		<category><![CDATA[obfuscated Javascript]]></category>
		<category><![CDATA[Return to Microsoft Security Assessment Tool and download it to guard your PC.]]></category>
		<category><![CDATA[Spyware is software which is loaded onto your computer without your knowledge]]></category>
		<category><![CDATA[There is a big chance that your computer is infected!]]></category>
		<category><![CDATA[They can cause data loss and file damages and need to be fixed as soon as possible.]]></category>
		<category><![CDATA[To help protect your computer]]></category>
		<category><![CDATA[Trj-Dwnldr.Win]]></category>
		<category><![CDATA[Trojan-Clicker.Win32.Bitdefener]]></category>
		<category><![CDATA[Trojan-PSW.Win32.Aletc]]></category>
		<category><![CDATA[Trojan-Spy.Win32.WMPatch]]></category>
		<category><![CDATA[Virus.BAT.Vr.a]]></category>
		<category><![CDATA[Windows Defender has detected spyware and ready to remove them]]></category>
		<category><![CDATA[Windows Security Alert]]></category>
		<category><![CDATA[Your Computer is Infected!]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=3395</guid>
		<description><![CDATA[By Andrew Brandt It&#8217;s been more than a week that we at Webroot, and countless others, have been getting floods of bogus messages with HTML attachments. I thought I&#8217;d give the curious readers of this blog a quick glance at one of the drive-by sites that load in the browser if you try to open [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=3395&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2010/09/27/newsflash-html-spammers-are-not-so-bright/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_securityalertdialog_crop.jpg" medium="image">
			<media:title type="html">20100924_fakealert_securityalertdialog_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_popup_crop.jpg" medium="image">
			<media:title type="html">20100924_fakealert_popup_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_scanwindow.jpg?w=300" medium="image">
			<media:title type="html">20100924_fakealert_scanwindow</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_graphic_disk.jpg" medium="image">
			<media:title type="html">20100924_fakealert_graphic_disk</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_graphic_flop.jpg" medium="image">
			<media:title type="html">20100924_fakealert_graphic_flop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_securityalertdialog_template.jpg?w=300" medium="image">
			<media:title type="html">20100924_fakealert_securityalertdialog_template</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_graphic_computer.jpg" medium="image">
			<media:title type="html">20100924_fakealert_graphic_computer</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_scanwindow.jpg?w=300" medium="image">
			<media:title type="html">20100924_fakealert_scanwindow</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_securityalertdialog.jpg" medium="image">
			<media:title type="html">20100924_fakealert_securityalertdialog</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2010/09/20100924_fakealert_fullscreen.jpg?w=300" medium="image">
			<media:title type="html">20100924_fakealert_fullscreen</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">wordpress blog stats</media:title>
		</media:content>
	</item>
	</channel>
</rss>
