<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: FAKEAV Uses Conficker Worm as Bait</title>
	<atom:link href="http://blog.trendmicro.com/fakeav-uses-conficker-worm-as-bait/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.trendmicro.com/fakeav-uses-conficker-worm-as-bait/</link>
	<description>Threat News and Information Direct from the Experts</description>
	<lastBuildDate>Fri, 10 Feb 2012 00:38:02 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: FAKEAV Goes Open Source… Or Not?</title>
		<link>http://blog.trendmicro.com/fakeav-uses-conficker-worm-as-bait/comment-page-1/#comment-34195</link>
		<dc:creator>FAKEAV Goes Open Source… Or Not?</dc:creator>
		<pubDate>Fri, 23 Oct 2009 21:38:56 +0000</pubDate>
		<guid isPermaLink="false">http://blog.trendmicro.com/?p=19931#comment-34195</guid>
		<description>[...] 2:38 pm&nbsp;(UTC-7)&nbsp;&nbsp; &#124; &nbsp;&nbsp;by David Sancho (Malware Researcher)   In the recent FAKEAV spam campaign, I realized something was off. Once the user clicks the URL and gets the bogus Antivirus 2010 up [...]</description>
		<content:encoded><![CDATA[<p>[...] 2:38 pm&amp;nbsp;(UTC-7)&amp;nbsp;&amp;nbsp; | &amp;nbsp;&amp;nbsp;by David Sancho (Malware Researcher)   In the recent FAKEAV spam campaign, I realized something was off. Once the user clicks the URL and gets the bogus Antivirus 2010 up [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

