Starware

Starware is an Internet Explorer toolbar presented as having specialized search functions and a pop-up blocker. While this is debatable, Starware has some additional hidden functions, such as displaying pop-up advertisements and redirecting search queries to its sponsor websites.

Posted on August 21, 2008 in Browser Helper Object

MS Antivirus 2008

MS Antivirus 2008 screenshot

MS Antivirus 2008 is a rogue anti-spyware program that comes from the same family as other rogue programs such as Windows Antivirus 2008, Antivirus 2008, System Antivirus 2008, Vista Antivirus 2008 and other clones. While MS Antivirus 2008 may look like it is a worth-while program for spyware removal, we have discovered that it is not. The user may wonder how MSAntivirus2008, MS Antivirus 2008, or MS Antivirus was installed onto his/her computer system without his/her actions. Usually this is done through a Trojan such as Zlob which is sometimes downloaded through a fake video codec, through spam emails or even through other malware or spyware. MS Antivirus 2008 is also known to display...

Posted on August 20, 2008 in Rogue Anti-Spyware Program

AntiVir64

AntiVir64 screenshot

Antivir64 or Antivir 64, is a rogue anti-spyware program and clone of Power Antivirus 2009 and Antispyware2008. Antivir64 may have been installed by a Trojan (Zlob, Vundo or Downloader) found on fake video codec downloads. Once the Trojan is installed, it may generate imaginary system notifications stating that the user's computer is infected with spyware. In order to remove the imaginary infections, Antivir64 will offer Antivir64's full version of the program. Antivir64's rogue messages may redirect the user to Antivir64's website (scanner.antivir64.com) to further download the full Antivir64 program. Antivir64 may also use its fake system scan to emulate a computer system scan and...

Posted on August 18, 2008 in Rogue Anti-Spyware Program

Internet Antivirus

Internet Antivirus screenshot

Internet Antivirus or InternetAntivirus, is a rogue anti-spyware program. Internet Antivirus may install in the user's computer system through Trojan Zlob or the user may have downloaded the trial version from a corrupt website. Once Internet Antivirus is installed, it will issue popups and system alert messages stating that the system is flooded with spyware. In order to remove the supposed threats, the user must purchase Internet Antivirus's commercial version of the program. All links provided by rogue Internet Antivirus may redirect the user to Internet-Antivirus.com or other rogue websites where Internet Antivirus's commercial version is sold for $49.95. Internet Antivirus may also...

Posted on August 13, 2008 in Rogue Anti-Spyware Program

Viewworldmy1.com

Viewworldmy1.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as WinPC Defender. Due to affiliated trojans infiltrating the computer via security exploits and modifying the browser settings, web-surfing activities are redirected to the Viewworldmy1.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover WinPC Defender.

Posted on August 13, 2008 in Rogue Websites

SpyHunter’s US Geographic “Infected PCs” Index (2007-Present)

The results are in! Alaskan residents are more likely to be victimized by spyware or adware infections, according to the just release Spyhunter Geographic Index. The Spyhunter Spyware Threat Research Team recently analyzed Enigma's infected-PC reports and our software sales data for all 50 U.S. states to determine the PC "infection rate" for each state. To compile the Spyhunter Geographic Index, we examined our state-by-state sales numbers and infection reports for all of 2007 and year-to-date in 2008 and found, not surprisingly, that the states with the most people had the most infections. In order to get a better sense for which states had the most vulnerable computers, we took the numbers for each state and figured them as a percentage of each state's population. With that formula, we were able to determine the most accurate...

Posted on August 12, 2008 in Computer Security

Taskmgr

Taskmgr is a porn dialer, which by operating the user's modem, may connect to pornographic websites. When calling its servers and dialing, Taskmgr will result in exorbitant rates for the user's phone line. Taskmgr also has the ability to download additional malware and adware onto the user's PC. Taskmgr runs each time the user's PC is started.

Posted on August 8, 2008 in Dialers

PC Protection Center 2008, Trojan.Agent.xfp, Trojan.Downloader.BEV, more – SpyHunter Update v.8.92

SpyHunter Spyware Definitions Update: v.8.92 (08/08/2008) SpyHunter Latest Program Update: v.3.5.11 Trojan.Vapsup Zlob.Trojan AntivirusXP 2008 Antivirus2008Pro Trojan.Generic Antivirus Master Trojan.Rootkit.Rustock Trojan.Downloader.Agent.tyx Trojan.Downloader.Exchanger Vista Antivirus 2008 Trojan.Downloader.Agent-BN Trojan-PSW.WOW Trojan.Dropper-Delf Antivirus 2008 Virtumonde Antivirus 2009 Trojan.FakeAlert AntiSpyCheck IE Antivirus XPSecurityCenter Power Antivirus 2009 XPAntivirus SpywareSecure Advanced Antivirus ISTBar ISecurity Windows Antivirus 2008

Posted on August 8, 2008 in Database Updates

Question about Item – Respond Now

"Question about Item - Respond Now" is a classic phishing email scam. The "Question about Item - Respond Now" email masquerades as an eBay page and tries to steal your login and account information. Do not trust suspicious emails and avoid clicking on links in emails. If you happen to login to your eBay account, notify your bank and credit card companies. You may need to close out your accounts.

Posted on August 7, 2008 in Phishing

Trojan.Agent.ir, Trojan.Nosok, Trojan.Inject.apd, more – SpyHunter Update v.8.90

SpyHunter Spyware Definitions Update: v.8.90 (08/06/2008) SpyHunter Latest Program Update: v.3.5.11 Keep Your SpyHunter Up to Date New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats. To use SpyHunter's Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update. Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter's Spyware Scanner. Newly Added Threat List The following new parasites have been added to SpyHunter: Updated Threat List The following parasite threats were updated: Win Antivir 2008 SideFind Trojan.FakeAlert Trojan.Generic Ultimate Antivirus 2008 Trojan.Xorpix AntivirusXP...

Posted on August 6, 2008 in Database Updates

‘CNN.com Daily Top 10’ Alert

CNN.com Daily Top 10 is a spam email created to download and install Trojan-Downloader.Agent.EL onto the user's computer system. Once the user receives CNN.com Daily Top 10 email, he/she will believe it's a legitimate email sent by CNN.com and will open it. CNN.com Daily Top 10 email contains the top ten stories of the day, however, none of the links provided redirect the user to any top story. If the user clicks on any of the links, he/she will be redirected to a website where a screen may display a message stating that the user needs the latest Flash player version to be able to see the site. Once the user downloads the update, he/she will be downloading Trojan-Downloader.Agent.EL disguised as the get_flash_update.exe file. The Trojan-Downloader.Agent.EL will open a conduit in the user's computer through which additional malware and...

Posted on August 6, 2008 in Fake Error Messages

GlaceTrojan

Glace is a Trojan that allows an unauthorized user some remote control over ones PC. This may result in private personal information being stolen. The Glace Trojan has the basic common features which most Trojans of its kind exhibit – it can gain access to the user's personal and system files. Glace, however, has one added distinctive malicious feature: it will modify and change the user's registry so that it can reinfect the user's PC each time an a.txt file with Notepad is open.

Posted on August 6, 2008 in Remote Administration Tools

MegaUpload Toolbar, Trojan.Dialer, more – SpyHunter Update v.8.89

SpyHunter Spyware Definitions Update: v.8.89 (08/04/2008) SpyHunter Latest Program Update: v.3.5.11 Keep Your SpyHunter Up to Date New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats. To use SpyHunter's Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update. Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter's Spyware Scanner. Newly Added Threat List The following new parasites have been added to SpyHunter: Updated Threat List The following parasite threats were updated: AntiSpyCheck Antivirus 2009 IE Antivirus XPAntivirus Zlob.Trojan Trojan.Generic Trojan-Downloader.Agent.gfg

Posted on August 4, 2008 in Database Updates

Antivirus XP

Antivirus XP or AntivirusXP, is a rogue anti-spyware program and clone of Antivirus 2008, Antivirus XP Protection and Antivirus XP 2009. Antivirus XP may be installed in the user's computer system by Trojan Zlob bundled in a fake video codec installer from an adult website. Once Antivirus XP is installed, the user may receive fake popups stating that the user's computer is infected with spyware. If the user clicks on any of these popups, he/she will be redirected to a malicous website to further purchase Antivirus XP's full version. Antivirus XP may also emulate a computer system scan and display erroneous scan results to trick the user into believing his/her computer is in danger. To remove the imaginary threats generated by the fake system scan, the user is supposed to buy Antivirus XP's full program. Antivirus XP is not able to...

Posted on August 4, 2008 in Rogue Anti-Spyware Program

SecureExpertCleaner

SecureExpertCleaner screenshot

SecureExpertCleaner or Secure Expert Cleaner, is a rogue anti-spyware program often bundled with the Trojan Zlob which is found on fake video codecs. SecureExpertCleaner can also be found on rogue websites that provide a trial for the user to download. Once Zlob is installed, it will generate an enormous amount of fake popups and system notifications stating that the user's computer is infected with spyware. If the user is tricked into clicking on any of these messages, he/she will be redirected to secureexpertcleaner.com where he/she will be forced to purchase SecureExpertCleaner's commercial version. SecureExpertCleaner will allege it's able to remove the spyware found on the user's...

Posted on August 4, 2008 in Rogue Anti-Spyware Program