CVE-2009-4556

CVE-2009-4556 affects Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1. The issue arises from weak permissions (Everyone: Full Control) on product files, enabling local privilege escalation by replacing executables such as quhlpsvc.exe with Trojan horses. The ...

Scareware Locks Apps on Infected PCs

USA Today is reporting on a new variant of scareware that not only inundates users with exhortations to purchase phony antivirus software called “Total Security 2009,” but that also locks users out of nearly all applications until they purchase the disreputable product. Once their PCs are infecte...