SpyHunter Threat Database Update 5.40

SpyHunter defs version 5.40 (06/29/2007) Latest Program version: 2.9.5018 The following new parasites have been added: SaveKeys SaveKeys is a keylogging program that may be surreptitiously installed on your PC. Once active, SaveKeys will record every key that you type on your computer. SaveKeys hides itself from the user by intermingling with Windows system processes. It will log emails and instant messaging conversations. Emails will be logged before any encryption is processed. This program will also log any applications that are launched, as well as websites visited. This program is a serious threat to your privacy and should be removed immediately if found on your PC! VirusHeal VirusHeal is a fake anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. VirusHeal launches on Windows...

Posted on June 29, 2007 in Database Updates

VirusHeal

VirusHeal screenshot

VirusHeal is a fake security program that was first detected in the wild in 2007. This application is fairly compact, measuring a little below four megabytes. VirusHeal has absolutely no anti-virus capabilities. VirusHeal belongs to a kind of malware infection known as a rogue antivirus program. Rogue antivirus programs are malware that impersonate legitimate anti-virus applications in order to scam their victims into purchasing them. VirusHeal is designed to attack 32-bit Windows operating systems, ranging from Windows 94 to Windows XP. VirusHeal can be found at the virusheal.com website. However, ESG security analysts strongly recommend staying away from VirusHeal's website. There is no...

Posted on June 26, 2007 in Rogue Anti-Spyware Program

SpyHunter Threat Database Update 5.34

SpyHunter defs version 5.34 (06/21/2007) Latest Program version: 2.9.5018 The following new parasites have been added: VirusLocker VirusLocker is a fake anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. VirusLocker launches on Windows startup and may generate excessive popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. This program can be extremely difficult to remove manually, and will continue to try to recreate itself. VirusLocker is affiliated with Starware, an adware company. AntiSpywareSuite AntiSpywareSuite is a rogue antispyware program that is often downloaded and installed by Trojans, through browser security exploits, or via other nefarious mechanisms. AntiSpywareSuite launches on...

Posted on June 21, 2007 in Database Updates

SpyHunter Threat Database Update 5.28

SpyHunter defs version 5.28 (06/14/2007) Latest Program version: 2.9.5018 The following new parasites have been added: Worm.Warezov Warezov is an email worm. Once it is executed on your computer, Warezov will embed itself deep within the Windows operating system to evade removal efforts. The worm will download information from specified websites on the Internet and will send itself out in the form of an email attachment to any email addresses that it discovers on your computer. AVSystemCare AVSystemCare is a rogue security application. This program will report nonexistent threats to you in an attempt to get you to purchase the full version of the program. AVSystemCare may be installed through drive-by downloads and other unscrupulous delivery methods. This program is known to be distributed by several malicious Trojans....

Posted on June 14, 2007 in Database Updates

SpywareSecure

SpywareSecure screenshot

SpywareSecure is a fake anti-spyware program that can be installed onto your computer through a Trojan without your knowledge or consent. Once installed, SpywareSecure will usually display fake alert messages and conduct system scans. The system scans carried out by SpywareSecure use fake results to scare you into purchasing a full version of SpywareSecure. SpywareSecure is not a legitimate security program. SpywareSecure cannot detect or remove computer parasites from your system.

Posted on June 9, 2007 in Rogue Anti-Spyware Program

SpyHunter Threat Database Update 5.21

SpyHunter defs version 5.21 (06/08/2007) Latest Program version: 2.9.5018 The following new parasites have been added: PrivacyProtector PrivacyProtector is a rogue drive cleaner program that is often downloaded and installed by a Trojan or through browser security holes. Privacy Protector launches on Windows startup and may generate popup adverts. It will also display fake notifications of imaginary security risks in its attempts to get the user to purchase the full version. This program is associated with several malicious Trojans. Trojan-PSW.OnLineGames.vm This Trojan monitors and records your keystrokes and scans your computer for stored passwords. This information is then sent to the parasite authors. This Trojan is highly dangerous and is a serious threat to your financial and personal information. This Trojan is known to steal...

Posted on June 8, 2007 in Database Updates

Worm.Frethem.f

Worm.Frethem.f is a nasty mass mailing worm. Once executed, Worm.Frethem.f will distribute itself to any email addresses that it can find on your Outlook Express and Windows Address books. Worm.Frethem.f maybe installed through security loopholes in Microsoft Outlook.

Posted on June 6, 2007 in Worms

Smart Keystroke Recorder

Smart Keystroke Recorder is a commercial computer surveillance program that monitors the user's keystrokes and is described as a keylogger. Smart Keystroke monitors and logs the user's keystrokes, online chat conversations, passwords, websites visited, email, credit card numbers and bank account information. Smart Keystroke Recorder must be manually installed and runs on every Windows startup and reboot.

Posted on June 1, 2007 in Keyloggers

SpyHunter Threat Database Update 5.14

SpyHunter defs version 5.14 (06/01/2007) Latest Program version: 2.9.5018 The following new parasites have been added: SystemDoctor SystemDoctor, which is directly related to SystemDoctor 2006, is a fake anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. SystemDoctor launches on Windows startup and may generate large numbers of popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. This program can be extremely difficult to remove manually, and will continue to try to recreate itself. DrAntispy DrAntispy is a rogue antispyware program that is often downloaded and installed by Trojans, through browser security exploits, or via other nefarious mechanisms. DrAntispy launches on Windows startup and...

Posted on June 1, 2007 in Database Updates

Security Toolbar 7.1

Security Toolbar (Security Toolbar 7.1) is a nasty toolbar that has the ability to hijack your browser and redirect it to malicious websites that promote corrupt anti-spyware applications. Security Toolbar is notorious for unauthorized self-installation and transmission of additional parasites onto your computer. Security Toolbar will also pop-up large amounts of non-existent threat reports, in hopes of tricking you into buying a rogue anti-spyware application. If a computer user does not succumb to its offers, Security Toolbar may download and install a trial version of a certain rogue anti-spyware application that will also bombard the desktop with fake warning messages. Immediate removal of Security Toolbar is strongly recommended. Toolbars are very common among many web browser applications. The scrupulous creators of Security...

Posted on May 25, 2007 in Trojans

SpyHunter Threat Database Update 4.98

SpyHunter defs version 4.98 (05/18/2007) Latest Program version: 2.9.5018 The following new parasites have been added: AnyCleaner AnyCleaner is a Korean rogue anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. AnyCleaner launches on Windows startup and may generate popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. Zlob.MovieBox MovieBox is a variant of the Zlob Trojan malware. It masquerades as a movie viewer application. This program is malicious and extremely dangerous. The MovieBox Trojan installs itself secretly through deceptive mechanisms, such as browser security exploits, and opens up a backdoor security hole, allowing remote attackers to control your computer, execute programs,...

Posted on May 18, 2007 in Database Updates

Zone Alarm Falsely Listed SpyHunter as a Threat

Today Zone Alarm Corporation started to list Enigma Software Group's SpyHunter software product in their "Zone Alarm" Security product as a security threat. Zone Alarm falsely listed the product as a Security Risk, with a medium threat rating. They identify SpyHunter as a not-a-virus:FraudTool.Win32.SpyHunter.b. We would like to inform our customers that we are in the process of contacting Zone Alarm. We will take the same measures that we took against other companies that falsely identified SpyHunter or Enigma Software Group as a threat. About Enigma Software Group, Inc. Enigma develops and markets digital products and services for the consumer market. Enigma is known mostly for its Anti-Spyware software product SpyHunter. SpyHunter is distributed exclusively over the Internet by download. Enigma owns and operates several websites,...

Posted on May 16, 2007 in Announcements

SpyHunter Threat Database Update 4.95

SpyHunter defs version 4.95 (05/15/2007) Latest Program version: 2.9.5018 The following new parasites have been added: PC Drive Tool PC Drive Tool is a fake system repair and hard disk maintenance utility that is often downloaded and installed by a Trojan or through browser security holes. PC Drive Tool will also display notifications of imaginary computer problems in its attempts to get the user to purchase the full version. This program can be extremely difficult to remove manually, and will continue to try to recreate itself. PC Drive Tool is believed to be made by the creators of SystemDoctor. PCTurboPro PCTurboPro is a fake PC system repair utility that is often downloaded and installed by a Trojan or through browser security holes. PC Turbo Pro will display notifications of imaginary computer problems in its attempts to get the...

Posted on May 15, 2007 in Database Updates

ICQ Stealing

ICQ Stealing (also known as ICQ PW Steal) is AOL spyware that typically steals passwords, exploits security vulnerabilities in the network, performs DoS attacks and even ICQ hacks aimed at other users of AOL.

Posted on May 12, 2007 in AOL Parasites

SpyHunter Threat Database Update 4.91

SpyHunter defs version 4.91 (05/07/2007) Latest Program version: 2.9.5018 The following new parasites have been added: Antivirus Solution Antivirus Solution is a rogue antivirus program that is often downloaded and installed by Trojans, through browser security exploits, or via other nefarious mechanisms. Antivirus Solution launches on Windows startup and may generate excessive popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. This program can be extremely difficult to remove manually, and will continue to try to recreate itself. Neospace Neospace is a rogue PC security program that is often downloaded and installed by Trojans, through browser security exploits, or via other nefarious mechanisms. Neospace launches on Windows startup and may...

Posted on May 7, 2007 in Database Updates