Results 1 to 10 of 11

Thread: Name: SRLApplet Publisher: Husdawg LLC

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Jul 2011
    Posts
    5

    Default Name: SRLApplet Publisher: Husdawg LLC

    I have found this application wants to run everytime I launch Firefox, I have done some searches on Google for the keyworks "Husdawg LLC SRLApplet" and the search results are totally manufactured. Please someone verify what I am seeing. There are fake sites that come up out of the search that claim it is safe, from places that look forged:
    http://www.twcenter.net/forums/showthread.php?t=287673
    http://www.swtor.com/community/showthread.php?t=114475
    Even when I try to search for "virus security srlapplet husdawg llc" I end up getting the same message that it is safe to run, but again, this looks bogus as they say in the second post how to turn off your protections.

    Question1: This appears to be a serious threat for a long time (2009 to now) and yet no Anti-virus/Spybot/etc will find it. Seems like this really did masquarade with a valid cert for a while (expired in Feb 2011).
    Question2: What kind of stuff has 'fake' search results like this? I looked through dozens of search results and I cannot find any conversation about this applet thats trying to run on my machine.
    Question3: Could I be personally targetted? How could there be no other mentions of this anywhere on the net?
    Question4: How do I find this SRLApplet and a) quarantee it so it stops trying to start up and crashes my browser b) how do I find the executable?
    I don't even know the name of the file that is causing the security alert for me (invalid cert). Please advise.

    -chris
    Last edited by tashi; 2011-07-17 at 06:24. Reason: Removed duplicate topics :-)

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello lankro,

    Which version of Firefox do you have and what is the operating system?

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Jul 2011
    Posts
    5

    Default Version info

    Firefox is 5.0 and OS is Windows 7 Ultimate 64-bit OEM SP1
    Intel Xeon E5520@ 2.27GHz (2 CPU) w/12G RAM

    I also located a verification that this is indeed some kind of malicious known thing:

    http://packetstormsecurity.org/files/cve/CVE-2008-4385
    http://packetstormsecurity.org/files..._unsafe.rb.txt

    Now I just need to figure out how to capture and send it to you.
    Last edited by lankro; 2011-07-17 at 22:12.

  4. #4
    Junior Member
    Join Date
    Jul 2011
    Posts
    5

    Default More Info

    So I tracked down the source URL of this malicious Applet:
    http://www.nvidia.com/Download/Scan.aspx?lang=en-us

    Please verify?
    Last edited by tashi; 2011-07-18 at 06:53. Reason: Disabled link

  5. #5
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello lankro,

    I left a note bringing this thread to the attention of our detectives.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  6. #6
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    This is no threat.
    The software in question is used by various vendors like NVidia to determine installed hardware on the computer. In case of NVidia it is used to determine the graphics card so the NVidia website can offer the corresponding driver update to make it easier for the user to find the correct driver update.

    However on some systems this software does not appear to be working correctly, in my tests I was not able to install or run the Husdawg software from the NVidia site with the Firefox, only with the Internet Explorer.

    You should be able to uninstall or disable the browser-addon within your browser if it causes trouble.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •