Wednesday, May 20, 2009

Crusader Antivirus Rogue

Crusader Antivirus has been classified as rogue. This software is produced by TRITAX Limited Software Company (DuckForce).



Looking at CrusaderAntivirus GUI and code, we can see references and common codes from AGAVA Antispy.





The registration verification code shows the contacted host:


activate.antispy.ru (89.108.66.62)
antispy.ru (89.108.65.143)
agava.ru (89.108.65.143)
(...)
AGAVA JSC: 89.108.64.0-89.108.71.255

Crusader Antivirus is a clone of AVAGA Antispy, but AVAGA is free. Unlike Crusader Antivirus there's no need to register to remove detected items.
Crusader Antivirus is a TRITAX Limited Software Company (DuckForce) product, but it contacts home (antispy.ru) to register itself...