About Click Studios
Click Studios, the software company behind the Passwordstate enterprise password manager, is warning customers of ongoing phishing attacks targeting them with updated Moserpass malware.Last week, the company notified its users that attackers successfully compromised the password manager's update mechanism to deliver info-stealing malware known as Moserpass to a yet undisclosed number of customers between April 20 and April 22.Click Studios published a second advisory on Sunday, saying that "only customers that performed In-Place Upgrades between the times stated above are believed to be affected and may have had their Passwordstate password records harvested."Phishing messages copy Click Studios emails shared on social mediaSince then, Click Studios has been assisting potentially impacted customers over email, providing them with a hotfix designed to help them remove the malware from their systems.However, as revealed today in a new advisory, emails received from Click Studios were shared by customers on social media allowing unknown threat actors to create phishing emails matching the company's correspondence and pushing a new Moserpass variant."It is expected the bad actor is actively monitoring social media for information on the compromise and exploit," Click Studios said today."It is important customers do not post information on Social Media that can be used by the bad actor. This has happened with phishing emails being sent that replicate Click Studios email content."The ongoing phishing attack attempting to infect more Passwordstate customers with the Moserpass data theft malware has reportedly only targeted a small number of customers.The company now asks those receiving suspicious emails "to
Key features of the Click Studios that are enabled through these drivers include:
- Reporting a Security Issue - Click Studios
- Known Issues - Click Studios Community
- Passwordstate v8 Changelog - Click Studios
- Passwordstate - Authentication Options - Click Studios
- Passwordstate Free Edition - Click Studios
- Feature Requests - Click Studios Community
- Click Studios Blog – Page 3
Users of WinPatrol 2009 come from the United States, it is also popular in Germany and United Kingdom.Program detailsURL: www.winpatrol.comInstallation folder: C:\Program Files\BillP Studios\WinPatrolUninstaller: C:\Program Files2\BILLPS~1\WINPAT~1\Setup.exe /remove /q0Estimated size: 1.35 MBFiles installed by WinPatrol 2009Program executable:winpatrol.exeName:WinPatrol MonitorWinPatrol System MonitorPath:C:\Program Files\billp studios\winpatrol\winpatrol.exeMD5:99e7b3f95e0390b931ab60a97a58272dAdditional files:patrolpro.dll - BillP Studios New Window Detection (Notifies WinPatrol PLUS when new windows are created or destoyed.)WinPatrolEx.exe - WinPatrol ExplorerWinPatroluac.exe - WinPatrol Monitor (WinPatrol System Monitor)Setup.exe - WinPatrol (TIN Setup)Behaviors exhibitedScheduled TaskWinPatrol.exe is scheduled as a task with the class '{6252034D-30EF-4333-A3AB-4321431D7D4D}' (runs on registration).Scheduled Task (Boot/Login)WinPatrol.exe is automatically launched at startup through a scheduled task named WinPatrol PLUS.2 Startup Files (User Run)WinPatrol.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'WinPatrol System Monitor' and executes as C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe.WinPatrolEx.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'WinPatrol Explorer' and executes as C:\Program Files\Turva\WinPatrol\WinPatrolEx.exe.Startup File (All Users Run)WinPatrol.exe is loaded in the all users (HKLM) registry as a startup file name 'WinPatrol [FREE Edition]' which loads as C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe -expressboot.2 Windows Firewall Allowed ProgramsWinPatrolEx.exe is added as a firewall exception for 'C:\Program Files\BillP Studios\WinPatrol\WinPatrolEx.exe'.WinPatrol.exe is added as a firewall exception for 'C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe'.Resource utilization averages WinPatrol.exeMemory:11 MB21.09 MB averageTotal CPU:0.0000717373%0.031193% averageKernel CPU:0.00003482%0.016088% averageUser CPU:0.00003692%0.015104% averageCPU cycles/sec:18,848,5278,062,084 averageSwitches/sec:570 averageI/O reads/min:35.32 KB435.61 KB averageI/O writes/min:79 Bytes105.02 KB averageHow do I remove WinPatrol 2009?You can uninstall WinPatrol 2009 from your computer by using the Add/Remove Program feature in the Window's Control Panel.On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:Windows Vista/7/8/10: Click Uninstall a Program.Windows XP: Click Add or Remove Programs.When you find the program WinPatrol 2009, click it, and then do one of the following:Windows Vista/7/8/10: Click Uninstall.Windows XP: Click the Remove or Change/Remove
