Trojan.Agent2.iag

Trojan.Agent2.iag, also known as Trojan.Win32.Agent2.iag, is a Trojan application that places system files and personal data at great risk of being stolen or compromised. Trojan.Agent2.iag is installed on the computer under deceptive pretenses, infiltrating your system without your informed consent. Not only does Trojan.Agent2.iag put your personal information at great risk, but it has been known to download additional adware or malicious files onto a computer, as well. Trojan.Agent2.iag may also be responsible for: the opening of illicit network connections, the use of polymorphic tactics to self-mutate, the disabling of already installed security software, and the modification of system files.

Posted on March 9, 2009 in Trojans

Toppromooffer.com

TopPromoOffer.com is a browser hijacker promoting the rogue anti-spyware application called VirusRemover 2009 (also known as Virus Remover 2009). Typically you will be redirected to this malicious domain due to trojans infiltrating your system and modifying your browser settings. Once you arrive at the TopPromoOffer.com webpage, you will be greeted with numerous pop-up windows notifying you of the various infections discovered on your computer, and it is suggested that you purchase and install VirusRemover2009. It is important to note, however, that these pop-up alert messages and the infections they report are all fake.

Posted on March 8, 2009 in Rogue Websites

Trojan.Agent2.hln

Trojan.Agent2.hln is a dangerous Trojan infection that is typically installed onto a computer via a web browser security exploit, and without your informed consent. Once installed and active on your computer, Trojan.Agent2.hln begins to download and install additional malware onto the infiltrated system. Besides these risks, Trojan.Agent2.hln may also severely compromise any and all personal information data on the infected machine, transferring information like passwords, financial records, etc. to an outside party, resulting in identity theft.

Posted on March 8, 2009 in Trojans

Av1-best-protect.info

Av1-best-protect.info is a rogue website promoting the fake spyware remover Anti-Virus-1 (also known as Antivirus 1). Due to the corresponding Vundo trojan that has managed to infiltrate your system through security exploits and modified your browser settings, you will find that all web-surfing activities are almost always redirected to the Av1-best-protect.info domain. Here your computer will be subject to a free – albeit fake – online scan, which reports dozens of fraudulent infections on your computer. All this is in order to intimidate you into purchasing the counterfeit anti-spyware application, Anti-Virus-1.

Posted on March 8, 2009 in Rogue Websites

"Tip of the Day" Popup

"Tip of the Day" Popup is a fake tip from rogue anti-spyware program Extra Antivirus. This "Tip of the Day" Popup reads: "Tip of the Day. This is very important advice. Please do not hesitate to use it. Use passwords and encrypt sensitive files. Passwords and other security features add layers of protection if used appropriately. By encrypting files, you ensure that unauthorized people can't view data even if they can physically access it. You may also want to consider options for full disk encryption, [sic]" If you follow this "Tip of the Day" Popup's prompts, you'll end up buying Extra Antivirus. Attempting to close this pop-up window will only cause it to reappear moments later.

Posted on March 8, 2009 in Fake Error Messages

Conficker.e

Not only does Conficker.e infect new machines, but it also updates computers infected with previous versions of the worm. The trojan spreads via MS08-067 security exploits. Conficker.e functions in pretty much the same way as its forerunners, Conficker B++ and Conficker.C. The worm joins compromised machines into a botnet - a collection of compromised computers running software under a common command-and-control infrastructure. The computer then might be used for DDoS attacks and spam attacks. Conficker.e (also known as Downadup) also establishes hidden remote access to the PC.

Posted on March 8, 2009 in Worms

LuxScan4.com

LuxScan4.com is a rogue website filled with malicious scripts, that installs dangerous rogue anti-spyware application called Internet Antivirus Pro. The LuxScan4.com domain is typically hit due to your system becoming compromised by Zlob trojans that bypass the security authentication and infiltrate your computer without your awareness, subsequently altering your browser settings in order to redirect your web-surfing activities to the LuxScan4.com webpage. Once on the LuxScan4.com domain, your computer will be subject to a fabricated scan that almost immediately reports dozens of fake infections, all in order to scare you into purchasing the InternetAntivirusPro rogue spyware remover.

Posted on March 7, 2009 in Rogue Websites

'Recommendations...' Alert

The security alert entitled "Recommendations..." is part of the promotion scheme practiced by the new rogue anti-spyware program called WiniBlueSoft. "Recommendations..." Alert is usually triggered by the Vundo trojans or unregistered version of WiniBlueSoft fake spyware remover that must have trespassed on your computer without your informed consent. This "Recommendations..." Alert typically appears during your web-surfing activities or while you are using some office application. "Recommendations..." Alert notifies you about various spyware infections allegedly found while scanning the registry and system files, all of which are counterfeit. These scare tactics are implored in order to intimidate you into purchasing the WiniBlueSoft program.

Posted on March 7, 2009 in Fake Error Messages

W32.SillyFDC.BAY

W32.SillyFDC.BAY is a self-replicating computer worm. W32.SillyFDC.BAY creates a file called xSafe.exe on a removable and USB drive in order to spread itself to other computers. W32.SillyFDC.BAY also creates a Windows service that allows W32.SillyFDC.BAY to run each and every time Windows starts up.

Posted on March 7, 2009 in Worms

Onlinespywarescanner.net

Onlinespywarescanner.net is a malicious browser hijacker website that promotes the rogue anti-spyware program called AntiSpyware Pro 2009. You are diverted to the Onlinespywarescanner.net domain due to a trojan that has infiltrated your computer and modified your browser settings. Once you arrive at this domain, you are subsequently persuaded or intimidated into purchasing AntiSpyware Pro 2009 in order to combat the fictitious infections Onlinespywarescanner.net claims your system has.

Posted on March 7, 2009 in Rogue Websites

Av-antispyware.com

Av-antispyware.com is a browser hijacker promoting the distribution of the rogue anti-spyware application known as Av-antispyware. Due to affiliated trojans that infiltrate the computer via security exploits and modify the browser settings, web-surfing activities are redirected to the Av-antispyware.com domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, in order to intimidate the user into purchasing the fake spyware remover Av-antispyware.

Posted on March 7, 2009 in Rogue Websites

Everscan4.info

Everscan4.info is a rogue website that promotes and spreads the fake spyware remover called Internet Antivirus Pro. Everscan4.info performs this task by first infecting your system with a backdoor trojan that modifies your browser settings in order to redirect your web-surfing activities to the Everscan4.info domain. Once relocated here, your computer will be subject to a fake online scan that reports copious amounts of parasites and infections - all of which are entirely fabricated - in order to intimidate you into purchasing and installing their rogue anti-spyware program, Internet Antivirus Pro.

Posted on March 6, 2009 in Rogue Websites

Globalsecurityscan.com

Globalsecurityscan.com is a dangerous rogue website that hijacks your web browser in order to promote its sponsoring fake spyware remover System Security 2009 (also known as System Security). Typically you will find yourself being redirected to the Globalsecurityscan.com domain when your computer is secretly infected by the corresponding Zlob trojan that alters your browser settings. Once you are at the Globalsecurityscan.com webpage, your computer is scanned by a fraudulent online scanner, accompanied by numerous pop-up notifications claiming that your computer is infected. This is when you are suggested to purchase and download System Security 2009 in order to combat these threats, however, System Security 2009 does absolutely nothing to aid your system.

Posted on March 6, 2009 in Rogue Websites

Scanjust6.info

Scanjust6.info is a dangerous hijacker that interrupts your web-surfing activities with redirections to its domain by exploiting backdoor trojans in order to modify your browser settings. You may also find yourself being diverted to Scanjust6.info due to other malicious domains. When you eventually arrive at Scanjust6.info, you will be subjected to a free – albeit fake - online scanner that reports numerous fabricated infection results, all in order to scare you into purchasing the rogue anti-spyware application this website promotes, Internet Antivirus Pro.

Posted on March 6, 2009 in Rogue Websites

SecurityHelpCenter.com

Securityhelpcenter.com is a browser hijacker promoting the rogue anti-spyware application Personal Antivirus. Typically your computer becomes infected with a backdoor trojan that modifies your browser settings in order to redirect you to the Securityhelpcenter.com domain. Usually, though, when you attempt to visit certain websites, Securityhelpcenter.com redirects you to this warning: "Warning! Visiting this site may harm your computer! This web site probably contains malicious software program, which can cause damage to your computer or perform actions without your permission. Your computer may be infected after visiting such a web site. We recommend you to install (or activate) antivirus security software." This is when you are suggested to purchase and download Personal Antivirus in order to protect your system from infection....

Posted on March 5, 2009 in Rogue Websites