The Importance of having two layers or more of malware prevention

What do you mean layers?

An abstraction layer (or abstraction level) is a way of hiding the implementation details of a particular set of functionality. Software models that use layers of abstraction include the OSI 7 Layer model for computer network protocols, the OpenGL graphics drawing library, and the byte stream input/output (I/O) model originated by Unix and adopted by MSDOS, Linux, and most other modern operating systems.

Wikipedia

It is like when you go outside on a cold winters day and you put on more than one layer of cloths to prevent yourself from freezing or getting too cold.   It can help protect your from getting a cold or loosing a limb.  This is the same philosophy I will be talking about today.

Isn’t one Antivirus software Enough?

I get asked this question every time that I help remove malware from someone’s system with either a free Antivirus software or a purchased software, and has been infected with malware.  Every Antivirus company will tell you in detail how they can never catch every new or old Trojans, Malware, or Viruses.   They will tell you how the Malware is constantly changing and evolving, and today’s updates might not catch tomorrows malware.

List of Malware sites for Dec 10, 2009

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4349):

• update-protection-z4.cn
• update-protection-z6.cn
• lenovosecurity01.cn
• lenovosecurity51.cn
• new-antimalware01.cn
• update-protection-z1.cn
• ferrari-scan9.cn
• radius-protect-c1.cn
• radius-protect-a1.cn
• radius-protect-b1.cn
• intel-secure10.cn
• intel-secure20.cn
• intel-secure90.cn
• intel-secure02.cn
• intel-secure01.cn
• atomantispyware11.cn
• atomantispyware21.cn
• atomantispyware31.cn
• atomantispyware51.cn
• atomantispyware61.cn
• pc-antispy013.cn
• pc-antispy999.cn
• pc-antispy051.cn
• pc-antispy001.cn
• windefscanm9.cn
• windefscanm0.cn
• vip-protectionv9.cn
• vip-protectionz4.cn
• windefscanm1.cn
• vip-protectionv8.cn
• top2009security.cn

Internet Antivirus Pro Scareware

• ewiali.cn
• ewiaguh.cn
• inb6sh.com
• divyza.cn
• jynuroh.cn
• jypebgi.cn
• diwehym.cn
• enoihup.cn
• kanjiur.cn

Fake Scanner Pages:

• scan.dewesan.cn

Rogue Antivirus scareware sites:

• siteadware.com
• antitroy.com
• letmeguard-yourzone-pc.com
• systempc-scan-check.net
• livepcguard.com
• downloadavr13.com
• clean-vironmypc.net
• cleanvir-onmypc.net
• cleanviron-mypc.net
• cleanvironmypc.net
• internal-scanforpc.com
• internal-scanforpc.net
• internalscanforpc.com
• internalscanforpc.net
• safetyantispywareshop.com

Fake Scareware sites for Nov 13, 2009

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

• guidetosecurity3.com
• virus-pcscan2.com
• 3gsoftstore.com
• allsecuritysoft.com

Internet Antivirus Pro Scareware

• pc-safe2009.com
• pcdoctor2010.com
• spydetect2009.com
• spywaredetector24.com
• viruseliminater2009.com
• virusidentifycenter.com
• webpcdoctor.com
• webspydetect.com
• webantispysoft.com
• webantispyware.com
• anti-spyware24.com
• anti-spywarenet.com
• pcsafetyonline.com
• anti-spywarecenter.com
• anti-spywarenet.com
• antispycenter.com
• antispywaretop.com
• antispyworldwide.com
• bestantispysoft.com
• bestvirusidentify.com
• webanti-spyware.com
• webpcprotect.com

Rogue Antivirus scareware sites:

• antiaid.com
• systemwarrior.com
• pcprotect2009.com
• pcsafety2009.com
• fast-zonescannow.com
• fast-zonescannow.net
• fastzonescan-now.com
• fastzonescannow.com
• fastzone-scannow.net
• fastzone-scannow.com
• fastzonescannow.net
• Antiviraprof2009.Microsoft.com (Modified Host file)
• Antiviraprof2009.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Scareware Adviser from safewebway.com

This site [safewebway.com] no matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for rogue antivirus software called Antivirus Plus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Consulting with a client

I had a consultation today with a client who wanted help with their new Acer AOD250-1962 10.1-Inch Pink Netbook – Over 3 Hours of Battery Life. So i went over email and the usual easy stuff. They aren’t really tech savvy so I had to slowly walk them over to how to get the most out of the of the system.    As I was working on the system and making sure it was running smoothly, I saw their broadband wireless  network was unencrypted, which is something you shouldn’t do.  So I had to talk to them about why it is ’so important’ to keep that encrypted.  You really don’t want people to be watching what you do on your wireless network do you?

So my client asked me to setup and secure there wireless broadband router.   I was being nice and decided, suffice it to say if they were having anyone borrowing their network for illegal stuff, they aren’t no more.

Scareware Adviser from Stopmalwaredomains.com

So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”.

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus Scareware Site and if your getting this screen it is time to get get Rid of it. You can check out the others like SecurityBrowseradviser.com it is exactly the same.

These try to block access to other sites to prevent the users from finding out how to remove this kind scareware. These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Fake Antivirus Sites for Sept 8, 2009

There isn’t much to say but back to work all those people who had labor day off, welcome back to work.

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

• superb-virus-scan07.com
• clean-all-spyware03.com
• superb-antivir-scan01.com
• superb-antivir-scan01.com

Internet Antivirus Pro Scareware

• wzand.info

Rogue Antivirus scareware sites:

• thesecuritywinscan.com
• go-checkvirus.net
• go-checkvirus.com
• safetyscantool.com

Windows Security Suite Scareware sites:

• safetysystem-protect.com
• safetysystem-protect.net
• safetysystem-guard.com
• safetysystem-guard.net
• systemscan-secure.com
• systemscan-secure.net
• go-virusscanner.net
• go-virusscanner.com
• go-scanvirus.net
• go-scanvirus.com
• windows-protectonline.net
• windows-systemshield.com
• windows-systemshield.net
• windows-protectonline.net
• windows-systemshield.com
• windows-systemshield.net

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Fake Antivirus Sites for Aug 5, 2009

Today has been really busy for the malware authors out there and I intend to update you on all the sites that are what I call scareware sites.

Internet Antivirus Pro Scareware sites:

• alectr.info
• cality.info
• diffus.info
• dictor.info
• upwize.info

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047 or later):

• bestscanantispywarev3.com
• best-virus-scanner6.com
• clean-all-spyware07.com

Antivirus System Pro Scareware Sites:

(SuperAntiSpyware removes it with Database Version 4053 or later)

• osawarepro.com

Rogue Antivirus scareware sites:

• antivirus-xp.awardspace.us
• vrenutredo.com
• hustlerscanner.com (fake Scanner Page)
• go-scansystem.com
• ultrapc-scan.com (Fake Scanner page)
• scanonline-protect.net
• checkvirus-zone.net
• scantoolsite.com
• scan-secure.net

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of malware sites for Sept 4, 2009

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

• hqvirusscanner8.com
• hqvirusscanner5.com
• antivirus-online-scan8.com
• thebestviruscheck.com

Internet Antivirus Pro Scareware Sites:

• bedash.info
• scourg.info
• best-scanpc.com

Rogue Antivirus scareware sites:

• go-scanandprotect.com
• go-scanandsearch.com
• securityscantoolworld.com
• myvirusscanner.net
• scan-secure.com
• ikyigy.cn
• ikyadeh.cn
• ikoiwe.cn
• ikorate.cn
• ihagoin.cn
• ijobuaw.cn
• uloumir.cn
• bideqta.cn

<p style=”text-align: center;”></p>
Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Fake Antivirus Sites for Sept 3, 2009

Looks like they have been at it again here is the list for Thursday:

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

• worldbestonlinescanner.com
• worldbestonlinescanner2.com
• best-antivirus3.com
• worldbestonlinescan9.com
• worldbestonlinescanner2.com
• antivirusonlinescan6.com
• hqvirusscanner.com

Rogue Antivirus scareware sites:

• securitytoolworld.com
• searchpcguard.net
• scansystem-online.net
• search-protect.net
• myprotected-zone.net
• system-guard.com
• antivirusfilter-zone.com
• scan-virus.net

Internet Antivirus Pro Scareware:

• droope.info
• faites.info
• tented.info
• sallut.info
• onclew.info
• numben.info

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Malware Sites for Sept 2, 2009

Antivirus System Pro Scareware Sites: (SuperAntiSpyware removes it with Database Version 4053 or later)

• virusermoverpro.com
• avir-guardian.com
• intsecureprof.com
• wins-guard.com
• viruskill2009.com
• viruskill2009.com
• system-guard2009.com
• virusermoverpro.com

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047 or later):

• antivirus-promo-scan9.com
• live-virus-scanner5.com

Internet Antivirus Pro Scareware — Download SUPERAntiSpyware (Database Version 3682 or later):

• anprun.info
• ungain.info

Rogue Antivirus scareware sites:

• gosearchguard.net (SUPERAntiSpyware Database Version 4074 or later)
• system-shield.net (SUPERAntiSpyware Database Version 4074 or later)
• scanandprotect-zone.com (SUPERAntiSpyware Database Version 4074 or later)
• factoria6.com (SUPERAntiSpyware Database Version 4074 or later)
• mynewprotection.net (SUPERAntiSpyware Database Version 4074 or later)
• mysystemsafety.com (SUPERAntiSpyware Database Version 4074 or later)

Install_antiviruspro.exe — How to remove it,

If your noticed a new program on your system called Install_antiviruspro.exe, the filename is usually associated with Antivirus Pro scareware sites. The interesting fact is that most of the time this is installed silently and should be removed Immediately. The program might of been installed by other adware or trojans on your system. The Good news SUPERAntiSpyware can block and removeInstall_antiviruspro.exe and thousands of other harmful applications. So if you have this fakeware or I call it scareware, maybe it is time to Buy SuperAntiSpyware Professional which comes with Realtime Blocking of threats! Prrevent potentially harmful software (spyware, adware, worms, dialers, hijackers, keyloggers) from installing or re-installing.

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of malware sites for Sept 1, 2009

Well with it being the end of the month it was to be expected here is a long list of sites.   So please read these carefully.

Personal Antivirus Scareware Site and How to Remove them:

• live-virus-scanner9.com
• tryantivirusscan.com
• antispyware-scanner2.com
• bewareofvirusattacks2.com
• antivirus-scanner6.com
• valueantivirusshop1.com

Internet Antivirus Pro Scareware*SUPERAntispyware gets rid of these too*

• adjudg.info
• atwain.info
• caretz.info
• gaudad.info
• krapen.info
• nevils.info
• outliv.info
• penvie.info
• stampo.info
• ticedu.info
• unwept.info
• gelded.info
• dolchi.info
• figgle.info
• botled.info

Rogue Antivirus scareware sites:

• securepcshield.com
• myprotectedzone.net

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

MALWAREDEF.EXE — How to Remove it

If your noticed a new program on your system called MALWAREDEF.EXE, the file name is usually associated with Malware Defender 2009, which is Rogue Antivirus scareware site. The interesting fact is that most of the time this is installed silently and should be removed Immediately. The Good news SUPERAntiSpyware can block and remove MALWAREDEF.EXE and thousands of other harmful applications. So if you have this fakeware or I call it scareware, maybe it is time to buy SuperAntiSpyware Professional which comes with Realtime Blocking of threats! Prevent potentially harmful software (spyware, adware, worms, dialers, hijackers, keyloggers) from installing or re-installing.

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

How to know if the scareware warning is real or not:

I got an email from someone who wants not to be named asking how do I know if these sites that I have talked about like Defenderpageblock.com, Spywaredomainlist.com, adwaredomainlists.com, badwaredomainlists.com, browserdefenderlist.com, malicioussitesblock.com, and browserliveprotection.com are fake warning sites because of how the site handles the URL presented.   Let me give you a few example urls to see what I mean:

http://defenderpageblock.com/block.php?id=2006-54&url=http://tech-linkblog.com/scareware-adviser-from-defenderpageblock-com/

http://browserliveprotection.com/block.php?id=2024-4&url=http://tech-linkblog.com/2008/12/microsoft-readys-to-layoff-around-15000-workers.html/

http://malicioussitesblock.com/block.php?id=2006-54&url=http://tech-linkblog.com/2009/08/list-of-malware-sites-for-aug-24-2009.html/

http://spywaredomainlists.com/block.php?id=2018-2&url=http://tech-linkblog.com/2009/08/scareware-adviser-from-spywaredomainlists-com.html/

http://adwaredomainlists.com/block.php?id=2031&url=http://tech-linkblog.com/2009/04/pc-speedscan-pro-a-bad-idea.html/

Now as you can see al these have an identification number probably like an affiliate link and then the url of the site that is supposed to be bad or have malicious in some way.  So what do you do when you see these types of warning pop up and you would like to know if this real.   Here are some things to try to see if it is real or not:

• change the url it is going to, try Google or some other site that you know isn’t malicious and see what happens.   You will notice it will say the same exact same thing.
• Check out Stopbadware.org –  Google uses this service for there search results so this would be more reliable and check out the warning domain to see what it says then also check out the domain and website in question.

List of Malware Domains for Aug 29. 2009

Looks like the fake AV software authors are gearing up for next month here is the list of domains.

Personal Antivirus Scareware Sites:

• antimalwarescanner-v4.com
• web-software-payments.com
• websecurepayments.com
• totalspywarescan1.com
• antivirus-online-scan7.com
• best-antivirus9.com
• warningmalwarealert.com
• securedvirusproscan.com
• megaspywarescan.com

Internet Antivirus Pro Scareware sites:

• pohsoft.info (Fake Antivirus Scanner Page)

Rogue Antivirus scareware sites:

• koliopewaqs.com
• pcscanneronline.net
• mysystemdefender.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Scareware Adviser from Spywaredomainlists.com

So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”.

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus Scareware Site and if your getting this screen it is time to get get Rid of it. You can check out the others like SecurityBrowseradviser.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Scareware Adviser From badwaredomainlists.com

So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”.

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus Scareware Site and if your getting this screen it is time to get get Rid of it. You can check out the others like SecurityBrowseradviser.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Scareware Adviser from Browserdefenderlist.com

So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”.

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus Scareware Site and if your getting this screen it is time to get get Rid of it. You can check out the others like SecurityBrowseradviser.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Fake Antivirus Sites for Aug 27, 2009

It seems they are not doing alot today but I will update when necessary.

Personal Antivirus Scareware Sites:

• check-my-pc-antivirus.com

Internet Antivirus Pro Scareware

• cuplift.info

Rogue Antivirus scareware sites:

• safetyscanner.net
• winprotectionsuite.com
• winprotection-suite.com
• myprotectionshield.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Even More List of malware Sites for Aug 26, 2009

Looks Like the Malware authors have been a little more busier then normal,  So I had to make a new post about this because of the list.   Check out my other list for more domains.

Personal Antivirus Scareware Sites:

• free-live-scanner.com
• virus-scan-org.com
• getyoursecuritynowv2.com

Internet Antivirus Pro Scareware sites:

• undeaf.info
• reglet.info
• raught.info
• quoifs.info
• potinz.info
• holdit.info
• filths.info
• extrip.info
• devicel.info
• debuty.info
• camlet.info
• wiving.info

Rogue Antivirus scareware sites:

• shieldsystem.net
• onlineguardgo.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Malware sites for Aug 26, 2009

This is going to be a small list the Malware writers didn’t do alot today but if something develops I will add it on this blog.

Personal Antivirus Scareware Site:

• antivirus-scannerv17.com
• best-security-scanv8.com
• antivirus-scannerv12.com
• getyourantivirusv3.com
• total-software-antivirus.com
• scan4virusnow.com

Internet Antivirus Pro Scareware:

• amamon.info
• scrowl.info
• narowz.info

Rogue Antivirus scareware sites:

• myonlineguard.com
• protectiontrust.net
• softplanmode.in
• securitytoolonline.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Malware sites for Aug 24, 2009

These malware authors have made more domains to use for there fake Antivirus suites:

Personal Antivirus Scareware Site:

• antivirus-scannerv15.com
• professionalmalwarescanv7.com
• scan-your-computer-now.com
• bestantispywarescanv4.com
• removeallthreatsnow.com

Internet Antivirus Pro Scareware sites:

• osadwarekill.com
• cressy.info
• unowed.info
• fatted.info
• declin.info

Rogue Antivirus scareware sites:

• scanandsearch.net
• sponlinescan.cn
• scanspywaresonline.net
• scansponline.cn
• onlinequickscan.com
• antivirusdoktor.com
• antivirus-doktor.com
• antivirus-doktor-2009.com
• antivirusdoktor-2009.com
• antivirusdoktor.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Fake AV sites for Aug 22, 2009

If you know anything about the Malware writers they are always registering new domains and here is the newest ones they are using:

Personal Antivirus Scareware Site:

• antispywarebestscanner.com
• professionalvirusscanv3.com
• professionalcomputerscanv2.com
• scan-your-pc-now.com
• professionalspywarescanv8.com

Internet Antivirus Pro Scareware:

• hopest.info
• suffic.info
• cressy.info
• unowed.info
• inclin.info

Rogue Antivirus scareware sites:

• securitytoolsite.com (Fake Scanner)
• webscansecurepc.com (Fake Scanner)

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Scareware Sites for Aug 18, 2009

The Scareware site authors have been busy today and here they are:

• pleach.info (Internet Antivirus Pro Scareware)
• pickknob.info (Internet Antivirus Pro Scareware)
• espied.info (Internet Antivirus Pro Scareware)
• envied.info (Internet Antivirus Pro Scareware)
• stonek.info (Internet Antivirus Pro Scareware)
• captum.info (Internet Antivirus Pro Scareware)
• enlarg.info (Internet Antivirus Pro Scareware)
• inb4ch.com (Internet Antivirus Pro Scareware)
• sicyon.info (Internet Antivirus Pro Scareware)
• officesecuritysupply.com (Like Internet Antivirus Pro Scareware)
• protectmycomputernow.com (Personal Antivirus Scareware Site)
• livetimevirusscaner.com (Personal Antivirus Scareware Site)
• premium-antispy-scanv7.com (Personal Antivirus Scareware Site)
• private-antivirus-scannerv2.com (Personal Antivirus Scareware Site)
• premium-antispy-scanv3.com (Personal Antivirus Scareware Site)
• livetimesecurityscan.com (Personal Antivirus Scareware Site)

Domains that Redirect to Scareware Sites:

• goparkscan.com (Redirects to Internet Antivirus Pro Scareware)
• goscansnap.com (Redirects to Internet Antivirus Pro Scareware)
• golikescan.com (Redirects to Internet Antivirus Pro Scareware)
• gotechscan.com (Redirects to Internet Antivirus Pro Scareware)
• goscantech.com (Redirects to Internet Antivirus Pro Scareware)
• gotubespot.com (Redirects to Internet Antivirus Pro Scareware)

Malware Sites for Aug, 16 2009

Here is a List of Malware Sites:

• ventsol.info (Internet Antivirus Pro Scareware)
• oplanet.info (Internet Antivirus Pro Scareware)
• neatsore.info (Internet Antivirus Pro Scareware)
• daobrains.info (Internet Antivirus Pro Scareware)
• addjest.info (Internet Antivirus Pro Scareware)
• sleave.info (Internet Antivirus Pro Scareware)
• mixsoul.info (Internet Antivirus Pro Scareware)
• unvelir.info (Internet Antivirus Pro Scareware)
• loacher.info (Internet Antivirus Pro Scareware)
• plantof.info (Internet Antivirus Pro Scareware)
• ursley.info (Internet Antivirus Pro Scareware)
• cybernetsafety.com (System Security acts like (Internet Antivirus Pro Scareware)
• serversafety.com (System Security acts like (Internet Antivirus Pro Scareware)
• bestscannerever.com (Windows Web Security acts like acts like (Internet Antivirus Pro Scareware)
• online-secure-scannerv2.com (Personal Antivirus Scareware Site)
• best-adware-scanner.com (Personal Antivirus Scareware Site)

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Malware Sites for Aug 13, 2009

• spyware-scannerv2.com (Personal Antivirus Scareware Site)
• homespywarescanner.com (Personal Antivirus Scareware Site)
• curtle.info (Internet Antivirus Pro Scareware)
• securityread.com (Like (Internet Antivirus Pro Scareware)

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Rating:

Advice : Do a Complete system scan and make sure you don’t have any more hidden malware.

I recommend :

Do a Full System with One of these Free Antivirus Software:

List of Malware sites for Aug 12, 2009

There seems to be a couple sites today so I will update as needed:

• antimalwareonlinescanv4.com (Personal Antivirus Scareware)
• securityfolderprotection.com (Personal Antivirus Scareware)
• computer-antivirus-scanv9.com (Personal Antivirus Scareware)
• private-antivirus-scan9.com (Personal Antivirus Scareware)
• spywarescannerv4.com (Personal Antivirus Scareware)
• virusonlinescanv3.com (Personal Antivirus Scareware)
• windowsprotectionsuite.com  (Rogue Antivirus Software)
• securityscaninternet.com (Like Personal Antivirus Scareware)
• curtal.info  (Scareware Site, tries to get you to install a Trojan)
• cowish.info Internet Antivirus Pro Scareware
• scanasite.com (Like Internet Antivirus Pro Scareware)
• joinsecurityspot.com  (Like Internet Antivirus Pro Scareware)
• realnssecurity.com  (Like Internet Antivirus Pro Scareware)

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Malware Sites for Aug 8, 2009

Just got an updated list of Sites that you should be aware of:

• pc-antispyware-2010.com (Like Home Antivirus 2010)
• pc-antispy2010.com (Like Home Antivirus 2010)
• pc-anti-spyware20-10.com (Like Home Antivirus 2010)
• pc-anti-spyware-2010.com(Like Home Antivirus 2010)
• pcanti-spyware-2010.com (Like Home Antivirus 2010)
• pc-anti-spyware2010.com(Like Home Antivirus 2010)
• pcantispyware20-10.com (Like Home Antivirus 2010)
• pc-antispyware20-10.com(Like Home Antivirus 2010)
• pc-antispyware-20-10.comp-c-anti-spyware-2010.com(Like Home Antivirus 2010)
• gomalwarescanner.com (Personal Antivirus Scareware Site)
• bestpersonalprotectionv2.com (Personal Antivirus Scareware Site)
• removeallviruses.com (Personal Antivirus Scareware Site)
• secure.softwere-store-payments.com (Personal Antivirus Scareware Site)
• securepersonalscanner.com (Personal Antivirus Scareware Site)
• antivirus-live-pro.com (Rogue Antivirus Software)
• niobes.info (Internet Antivirus Pro Scareware)

Each one of these sites have something they want to try to get you to do. Some try to fool you into installing software to “Scan” for virus but in reality you are just installing a Trojan. Others like to try to scam you into buying there fake product so they can make money off of you. In reality this software does nothing to provide any virus protection. Sometimes they even use exploits to install onto the system. These usually have Pop ups or warnings saying you have a virus. There might be even a Web browser re director to the site in question. You should never download or install software from an Unknown source. Also you should never buy any product without asking questions.

List of Rogue Antivirus sites August 4, 2009

Looks like they have more Fake Antivirus sites up and running so I thought I would pass them along:

• basicsystemscanner.com (Personal Antivirus Scareware)
• checkmypcantivirus.com (Personal Antivirus Scareware)
• onlineproantivirusscanner.com (Personal Antivirus Scareware)
• online-pro-antivirus-scan.com (Personal Antivirus Scareware)
• secure-pro.cn (Fake Windows Security Messages)
• bodyscanguide.com (Fake Windows Security Messages)
• bestsecuredpcs.com (Fake Windows Security Messages)
• somesecuritypc.com (Rogue Exploit Antivirus Scanner)
• scanwebtech.com (Rogue Exploit Antivirus Scanner)
• bisquva.cn (Rogue Antivirus)
• pc-anti-spyware-20-10.com (Like Home Antivirus 2010)
• pcantispyware2010.com(Like Home Antivirus 2010)
• spywaredisplay.com (Rogue AntiSpyware)
• spywaremonitoring.com (Rogue AntiSpyware)
• spywareremovalhelp.net (Rogue AntiSpyware)
• antispywarefile.com (Rogue AntiSpyware)

These sites try to get you to install software or get you to buy pay for some fake software.   If you keep getting popups from these guys then you have some kind Trojan acting like it is a real Antivirus or Antispyware.  I recommend getting rid of those annoying little warnings and redirects.   Some of these are actually Web Browser redirects, others try to scare you into downloading or buying their product.   You should never download or buy anything from a site you don’t know anything about.

Some common tricks are Popups, warnings, Toolbar shield, and also a fake web page scanning screen.