[Emerging-Sigs] 2 squared

Matt Jonkman jonkman at jonkmans.com
Sat Jan 3 13:08:02 EST 2009

Thanks for that Jim. I agree, it's not a reputable site. And using
AntiSpyware as a user-agent screams out insecurity. If they were a real
company doing real research and they wanted to use a custom UA they'd
surely be touting their name as branding vs trying to convince us
they're really an AS product. :)

Side note: make sure you're using references from
doc.emergingthreats.net to make sure you have any updates. The one you
posted isn't being updated any longer.


James McQuaid wrote:
> Hi Jack,
> McAfee and WOT rate it as dangerous.  It links to sites that reside on
> the same IP which are also rated dangerous.  McAfee classifies the
> available downloadable executables as spyware.
> 2squared.com
> antispywarebot.com
> errorsweeper.com
> privacycontrol.com
> regclean.com
> www.2squared.com
> www.antispywarebot.com
> www.errorsweeper.com
> www.privacycontrol.com
>> From: Jack Pepper <pepperjack at afferentsecurity.com>
>> Subject: [Emerging-Sigs] 2 squared
>> To: "Signatures, Emerging Threats" <emerging-sigs at emergingthreats.net>
>> Message-ID:
>>        <20090102170059.msjaa3up5w44csgc at mail.afferentsecurity.com>
>> Content-Type: text/plain;       charset=ISO-8859-1;     DelSp="Yes";
>>        format="flowed"
>> I was trying to research some hits on this rule:
>> http://doc.bleedingthreats.net/bin/view/Main/2007575
>> but I couldn't really be sure if 2 squared was a fake antispyware or
>> not.  Does anybody on the list have a definitive ruling on this?  Are
>> they running a legit anti spyware product?
>> jp
> ----------------------------------------
>> @fferent Security Labs:  Isolate/Insulate/Innovate
>> http://www.afferentsecurity.com

Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205

PGP: http://www.jonkmans.com/mattjonkman.asc

More information about the Emerging-sigs mailing list