Scareware from Antivirus 7

By Paul | Mar 16, 2010

You will see this:

Then it will popup with this little warning:

It tries to download ASetup_2024-6.exe from server 195.5.161.171.   I didn’t download the file because I already knew what that was all about.   I recommend people who have downloaded this file and installed to do a full antivirus with a trusted and known Antivirus software vendor. This Fake Antivirus software is not real and you should be careful what you install or download.

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

The Importance of having two layers or more of malware prevention

By Paul | Feb 3, 2010

Photo by: nasa1fan/MSFC

Photo by: nasa1fan/MSFC

What do you mean layers?

An abstraction layer (or abstraction level) is a way of hiding the implementation details of a particular set of functionality. Software models that use layers of abstraction include the OSI 7 Layer model for computer network protocols, the OpenGL graphics drawing library, and the byte stream input/output (I/O) model originated by Unix and adopted by MSDOS, Linux, and most other modern operating systems.

Wikipedia

It is like when you go outside on a cold winters day and you put on more than one layer of cloths to prevent yourself from freezing or getting too cold.   It can help protect your from getting a cold or loosing a limb.  This is the same philosophy I will be talking about today.

Isn’t one Antivirus software Enough?

I get asked this question every time that I help remove malware from someone’s system with either a free Antivirus software or a purchased software, and has been infected with malware.  Every Antivirus company will tell you in detail how they can never catch every new or old Trojans, Malware, or Viruses.   They will tell you how the Malware is constantly changing and evolving, and today’s updates might not catch tomorrows malware.

Fake Scareware adviser from defenderwebadvisor.com

By Paul | Dec 14, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site [iewarningsite.com] no matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Malware sites for Dec 10, 2009

By Paul | Dec 10, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4349):

  • update-protection-z4.cn
  • update-protection-z6.cn
  • lenovosecurity01.cn
  • lenovosecurity51.cn
  • new-antimalware01.cn
  • update-protection-z1.cn
  • ferrari-scan9.cn
  • radius-protect-c1.cn
  • radius-protect-a1.cn
  • radius-protect-b1.cn
  • intel-secure10.cn
  • intel-secure20.cn
  • intel-secure90.cn
  • intel-secure02.cn
  • intel-secure01.cn
  • atomantispyware11.cn
  • atomantispyware21.cn
  • atomantispyware31.cn
  • atomantispyware51.cn
  • atomantispyware61.cn
  • pc-antispy013.cn
  • pc-antispy999.cn
  • pc-antispy051.cn
  • pc-antispy001.cn
  • windefscanm9.cn
  • windefscanm0.cn
  • vip-protectionv9.cn
  • vip-protectionz4.cn
  • windefscanm1.cn
  • vip-protectionv8.cn
  • top2009security.cn

Internet Antivirus Pro Scareware

  • ewiali.cn
  • ewiaguh.cn
  • inb6sh.com
  • divyza.cn
  • jynuroh.cn
  • jypebgi.cn
  • diwehym.cn
  • enoihup.cn
  • kanjiur.cn

Fake Scanner Pages:

  • scan.dewesan.cn
Rogue Antivirus scareware sites:

  • siteadware.com
  • antitroy.com
  • letmeguard-yourzone-pc.com
  • systempc-scan-check.net
  • livepcguard.com
  • downloadavr13.com
  • clean-vironmypc.net
  • cleanvir-onmypc.net
  • cleanviron-mypc.net
  • cleanvironmypc.net
  • internal-scanforpc.com
  • internal-scanforpc.net
  • internalscanforpc.com
  • internalscanforpc.net
  • safetyantispywareshop.com

List of malware sites for Dec 7, 2009

By Paul | Dec 7, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • go-scan001.com
  • removeallaswarea.cn
  • servscanner03.com
  • servscanner07.com
  • bestviruskillert.com
  • antispylista.com
  • go-scan003.com
  • go-scan006.com
  • prefect-defencey.com
  • windowsdefencey.cn
  • prefect-defencem.com
  • superprotection1.com
  • quadcorescannerb.com
  • quadcorescannerh.com
  • armyprotection80.com
  • armyprotection01.com

Internet Antivirus Pro Scareware

  • eneuzo.cn
  • doquza.cn
  • enegoys.cn
  • jyqhoki.cn
  • doqypku.cn
  • jyseny.cn
Rogue Antivirus scareware sites:

  • go-scanyoursystem.com
  • go-scanyoursystem.net
  • makesafeyourpc.com
  • systemscan-check.com
  • systemscan-check.net
  • pc-computerload.com
  • doctor-alex.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Scareware Sites for Dec 1, 2009

By Paul | Dec 1, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • prointernetdefence2.com
  • royaldefensescan.com
  • royalprotectionscan.com
  • msprotectionscan0.com
  • titansecure002.com
  • titansecure001.com
  • allinonesecurity0.com
  • allprotection6.com
  • allprotectiona2.com
  • allprotectiona3.com
  • royaldefencescana.com
  • royaldefensescana.com

Rogue Antivirus scareware sites:

  • smartmechanic.net
  • topspeeds.cn
  • defenderav.com
  • secsoft-estore.com
  • security-estore.com
  • vir-curemypc-now.com
  • vircheckpc.com

Internet Antivirus Pro Scareware

  • ewezyod.cn

Fake Scanner Pages:

  • bluesecurityutility.net
  • bestsecurityutility.net
  • farmsecurityutility.net
  • freesecurityutility.net
  • newsecurityutility.net
  • securityexternaltools.ne
  • securityintelligencetools.net
  • securitytoolsediting.net
  • securitytoolslisted.net
  • securitytoolsuser.net
  • securityutilitybelt.net
  • securityutilityblog.net
  • securityutilitydisc.net//li>
  • securityutilityonline.net
  • securityutilitys.net
  • securityutilityshop.net
  • securityutilitystore.net
  • securityutilitytoday.net
  • securityutilitytool.net
  • thesecurityutility.net
  • securitytoolsprior.net
  • best-scan.biz
  • pc-scanner.us
  • pc-scanner.info
  • malware-scaner.info

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake Scareware sites for Nov 26, 2009

By Paul | Nov 26, 2009

personalantivirus2

Personal Antivirus — Download

SUPERAntiSpyware (Database Version 4047):

  • pc-guard.cn
  • internetdefencesystem.com
  • value-protection.com
  • best-scanner1.cn
  • deleteallthreats.cn
  • cleanthispc.cn
  • killallmalware.cn
  • valuewebscana.com
  • worldmagprotection.cn
  • worldpcsecurity.cn
  • pcworldsecurity.cn
  • spywareremover1.cn
Rogue Antivirus scareware sites:

  • downloadavr11.com
  • advancedvirus-remover-2010.com
  • advanced-virusremover-2010.com
  • best-scan-pc.biz
  • pc-scanner.biz
  • pc-scanner.net
  • enterprise-suite.net
  • keepcop.com

Fake Scanner Pages:

  • pc-scannerr.com
  • malware-scaner.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Scareware sites for Nov 24, 2009

By Paul | Nov 24, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • websecurity2.cn
  • be-secured.cn
  • good-protection.cn
  • best-protection.cn
  • power-security.cn
  • bestsecureweb.cn
  • your-security.cn
  • coremediaarea.com
  • scan4spyware.cn
  • platinumdefence.cn
  • securityeverywhere.cn
  • cyber-scan-2.com
  • secureitem.cn
  • scan4malware.cn
  • 0396f.scan4malware.cn

Internet Antivirus Pro Scareware

  • osadwarekill2009.com
  • ewiava.cn
  • esuipka.cn
Rogue Antivirus scareware sites:

  • viridentifycenter.com
  • keepcop.com

Fake Scanner Pages:

  • scan.hirovecul.cn
  • scan.levasycu.cn
  • scan.join2bestsecuritynow.com
  • skynety.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

SEO Blackhat uses Scareware tactics for Cyber Monday

By Paul | Nov 23, 2009

cybermondayscareware1
cybermondayscareware2

I was checking out some of the Cyber Monday Deals when I came across these two sites in Google. It looks like the black hats are at it again, trying to get you to install their fake Antivirus Software or Scareware as some would call. I went through to find out the fake scanner page url, you can see that on my previous post. They seem to only work when you have a http referrer from the search engine in question. The ones that I know about are Bing, Yahoo, Google, and Ask. If you click on a link from Google it will tell the page in question that you are coming from Google or any search engine above and thus display the fake warnings.

So how can you get around this little trick and prevent yourself from getting this type of scareware. There is and it can be used with Firefox. It is an addon that can prevent the Seo Blackhats who use this trick from fooling you. It is called No-Referer and it can prevent these fake warnings from popping up.

Download it:
Firefox Addon page
Firefox 3.5 and newer

List of Fake Scareware sites for Nov 23, 2009

By Paul | Nov 23, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • yourantivira3.com
  • yourantivira7.com
  • free-scanner-online.net
  • download-free-scanner.net
  • best-scanner-f.com
  • antimalware-b.com
  • antispy-scanb.com
  • beprotected-b.com
  • firstantispy01.com
  • attention-scanner3.com
  • spyware-scan9.com
  • wait-for-scanning2.com
  • cyber-scan001.com
  • cyber-scan008.com
  • cyber-scan030.com

Internet Antivirus Pro Scareware

  • ewusiyt.cn
Rogue Antivirus scareware sites:

  • securekeeper.com
  • eco-av.com
  • afxsecuritysoftware.com
  • avansystemsecuritystore.com
  • securitytoolcode.com
  • enterprisedefender.net

Fake Scanner Pages:

  • aslowride.com
  • secoscan.info
  • acremshell.com
  • cremshell.com
  • scdemshell.com
  • screjmshell.com
  • scremhell.com
  • slwride.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Postcards and Snopes Hoaxes

By Paul | Nov 18, 2009

I was on Facebook when one of my sisters made a comment about this:

I checked with Norton Anti-Virus, and they are gearing up for this virus!
I checked Snopes, and it is for real. Get this E-mail message sent around to your contacts ASAP.

SUBJECT : HUGE VIRUS COMING!

http://www.snopes.com/computer/virus/postcard.asp

PLEASE FORWARD THIS WARNING AMONG FRIENDS, FAMILY AND CONTACTS!

You should be alert during the next few days. Do not open any message with an attachment entitled ‘POSTCARD FROM HALLMARK,’regardless of who sent it to you. It is a virus which opens A POSTCARD IMAGE, which ‘burns’ the whole hard disc C of your computer.

This virus will be received from someone who has your e-mail address in his/her contact list. This is the reason why you need to send this e-mail to all your contacts. It is better to receive this message 25 times than to receive the virus and open it.

If you receive a mail called’ POSTCARD,’ even though sent to you by a friend, do not open it! Shut down your computer immediately. This is the worst virus announced by CNN.

List of Scareware sites for Nov 16, 2009

By Paul | Nov 17, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • computerguardsoft.com
  • brand-scanner4.com
  • nanoscan6.com
  • allinonescan3.com

Internet Antivirus Pro Scareware

  • Aviraplatinum2009.Microsoft.com (Host File Modification)
  • Aviraplatinum2009.com
Rogue Antivirus scareware sites:

  • mysecurity-suite.com
  • protectionsuite.net
  • aviirusplus.com
  • antivirusplus7.com

Fake Scanner Pages:

  • onlyomne.com
  • fastnety.com
  • scan.teenntre.cn
  • scan.gikolali.cn
  • scan.nowscanyoursecurity.com
  • scan.clearyourpconlinescan.com
  • av-test-here.net
  • sixlice.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake Warning page for inetgateway1.com

By Paul | Nov 16, 2009

fakepluswarning
This is an example of what you might see if you did have it!!

This site [inetgateway1.com] no matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for a Rogue anti virus cloned from Fakeplus Anti Virus. This is a new scareware rogue antivirus software. It claims that sites have malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake warning page for clean-safe-gateway.com

By Paul | Nov 16, 2009

fakepluswarning
This is an example of what you might see if you did have it!!

This site [clean-safe-gateway.com] no matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for a Rogue anti virus cloned from Fakeplus Anti Virus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake Scareware Adviser from iewarningsite.com

By Paul | Nov 15, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site [iewarningsite.com] no matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake Scareware sites for Nov 13, 2009

By Paul | Nov 13, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • guidetosecurity3.com
  • virus-pcscan2.com
  • 3gsoftstore.com
  • allsecuritysoft.com

Internet Antivirus Pro Scareware

  • pc-safe2009.com
  • pcdoctor2010.com
  • spydetect2009.com
  • spywaredetector24.com
  • viruseliminater2009.com
  • virusidentifycenter.com
  • webpcdoctor.com
  • webspydetect.com
  • webantispysoft.com
  • webantispyware.com
  • anti-spyware24.com
  • anti-spywarenet.com
  • pcsafetyonline.com
  • anti-spywarecenter.com
  • anti-spywarenet.com
  • antispycenter.com
  • antispywaretop.com
  • antispyworldwide.com
  • bestantispysoft.com
  • bestvirusidentify.com
  • webanti-spyware.com
  • webpcprotect.com
Rogue Antivirus scareware sites:

  • antiaid.com
  • systemwarrior.com
  • pcprotect2009.com
  • pcsafety2009.com
  • fast-zonescannow.com
  • fast-zonescannow.net
  • fastzonescan-now.com
  • fastzonescannow.com
  • fastzone-scannow.net
  • fastzone-scannow.com
  • fastzonescannow.net
  • Antiviraprof2009.Microsoft.com (Modified Host file)
  • Antiviraprof2009.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake Scareware Adviser for Spyware-list.com

By Paul | Nov 9, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site [Spyware-list.com] now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of scareware sites for Nov 6, 2009

By Paul | Nov 6, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • my-protection1.com
  • getmyprotection1.com
  • installprotection2.com
  • be-secured2.com
  • get-secure2.com
  • spywareclean3.com
  • spywareclean0.com
  • be-protected6.com
  • be-protected2.com
  • all-scan9.com
  • all-security0.com
  • base-scanner3.com
  • bestwaytoscanz.com
  • all-security9.com
  • Internet Antivirus Pro Scareware

  • winguard-2009.com
  • direct-antivirus.com
  • coantivirus.com
  • win-guard2009.com

Rogue Antivirus scareware sites:

  • 1stantivirusplus.com
  • blockprotector.com
  • youravplus.com
  • antivirusstock.com
  • g-antivirus.com
  • general-av.com
  • generalavs.com
  • macatte.com

Fake Scanner Pages:

  • scanner-free.com
  • doublenuks.com
  • doublenk.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

List of Scareware sites for Oct 29, 2009

By Paul | Oct 28, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • topantimalwarescan5.com
  • best-anti-virus6.com
  • activate-antivirus.com
  • best-topscanner.com
  • best-antimalware-1.com
  • mycomputerupdate01.com
  • mycomputerupdate5.com
  • updatesystem00.com
  • internetprotectectionscan.com
  • liveantivirusproscanner.com
  • tophotpc-check.com
  • detect-spyware9.com
  • detect-spyware3.com
  • detect-spyware5.com
  • detect-spyware7.com
  • detect-spyware1.com
  • good-antispyware8.com
  • good-antispyware7.com
  • kill-virusa.com
  • onlinesecurityscanv15.com
  • winscanner16.com
  • winscanner11.com
  • winscanner18.com
  • kill-viruse.com

Rogue Antivirus scareware sites:

  • antimalware-software.org
  • av-pro-2010.com
  • a-vpro21.com
  • cyberstrongstore.com
  • windesktopdefender.com
  • avprotectioncenter.com

Fake Scanner Pages:

  • secmodify.com
  • bestscanonline.info
  • checkonlinenow.info
  • checkonlineonline.info
  • checkonlinesite.info
  • checkonlinestore.info
  • checkonlinetoday.info
  • freecheckonline.info
  • freescanonline.info
  • mycheckonline.info
  • newcheckonline.info

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake Scareware adviser from malware-url.com

By Paul | Oct 28, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site [malware-url.com] now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake Scareware adviser from browsersecurityaddon.com

By Paul | Oct 27, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake Scareware Adviser from unsecurewebsites.com

By Paul | Oct 27, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Malware domains for Oct 27, 2009

By Paul | Oct 26, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • top-scanner2.com
  • top-scanner9.com
  • top-scanner11.com
  • removespywarev1.com
  • removespywarev3.com
  • removespyware-7.com
  • good-antispyware8.com
  • good-antispyware7.com
  • virus-detect08.com
Rogue Antivirus scareware sites:

  • advanced-virus-remover-2010.com
  • downloadavr7.com
  • windefender-2009.com

Fake Scanner Pages:

  • aletcenter.com
  • driverupdatesystem.com
  • ocscanner.com
  • bestremoverpro.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake Scareware Adviser from Malware-domain.com

By Paul | Oct 25, 2009

Alpha_Antivirus_Warning
This is an example of what you might see if you did have it!!

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Email Malware comes a Knocking

By Paul | Oct 24, 2009

I was checking my email and I got a email. I thought we would talk about it some:

Subject Line: Collection on setebembro months
Anexo (fatura_setebembro.doc)179,kb
__________________________________________
Hircon Assessoria Consultoria e Cobrança LTDA
Prezado cliente,
Consta em nosso sistema uma fatura vencida referente ao mes Setembro (09/2009),
caso nao tenha efetuado o pagamento segue o extrato em anexo.
Agradece a Gêrencia.

This is what it is when you translate it:

Subject Line: Collection on setebembro months

Annex (fatura_setebembro.doc) 179 kb
__________________________________________

Hircon Advice and Collection Consulting LTDA

Dear customer

It is recorded in our system won an invoice for the month September (09/2009)

If you have not made the payment following the statement attached.

Thanks management.

File faturasetembro.exe received on 2009.10.24 09:11:49 (UTC)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.10.24 Trojan-Downloader.Win32.Banload!IK
AhnLab-V3 5.0.0.2 2009.10.23 -
AntiVir 7.9.1.44 2009.10.23 -
Antiy-AVL 2.0.3.7 2009.10.23 -
Authentium 5.1.2.4 2009.10.24 W32/Trojan-juke-based!Maximus
Avast 4.8.1351.0 2009.10.24 -
AVG 8.5.0.423 2009.10.24 -
BitDefender 7.2 2009.10.24 Gen:Trojan.Heur.je3@rPiM!8aif
CAT-QuickHeal 10.00 2009.10.24 (Suspicious) – DNAScan
ClamAV 0.94.1 2009.10.24 -

Fake Scareware Adviser from Spyware-url.com

By Paul | Oct 23, 2009

spyware-url.com

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Alpha Antivirus a Clone of Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of scareware sites for Oct 23, 2009

By Paul | Oct 22, 2009

personalantivirus2

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):

  • mypc-scanner11.com
  • mypc-scanner9.com
  • mypc-scanner7.com
  • yourmalwarescan9.com
  • yourmalwarescan1.com
  • yourspywarescan8.com
  • yourspywarescan1.com
  • yourspywarescan6.com
  • yourspywarescan15.com

Rogue Antivirus scareware sites:

Fake Scanner Pages:

  • myscanonline.info
  • theprotectour.com
  • securedataprotect.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Fake scareware adviser from spywaredomain.com

By Paul | Oct 22, 2009

spywaredomain.com

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Fake Scareware adviser from windefendersiteblock.com

By Paul | Oct 22, 2009

Windefendersiteblock.comm

This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus. This is a new scareware rogue antivirus software. It claims that sites have a malware and you need to activate the security software. Doing this will not help you because this is what they call Ransomware, in which you are prompted to buy their software in order to clean your system. If you follow links from these websites you will be directed to buying the software. It has every makings of some old techniques like Yourbrowserprotection.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

List of Fake Scareware Sites for Oct 21, 2009

By Paul | Oct 21, 2009

AntivirusPro-scareware

Personal Antivirus — Download SUPERAntiSpyware (Database Version 4047):
  • computer-protection-2.com
  • computer-protection-7.com
  • computer-protection-9.com
  • your-pc-protection1.com
  • your-pc-protection0.com
  • top-antispyware-scan0.com
  • computer-protection11.com
Rogue Antivirus scareware sites:

  • avpro-21.com
  • av-pro-21.com
  • a-v-pro-21.com
  • systemprotect-zone.net
  • pcscoutinc.com
  • pcscoutlab.com
  • pcsecuritycorp.com
  • windowssystemdefender.com

Fake Scanner Pages:

  • scan.scanpcalertstoday.com
  • best-scan-pc.net
  • plcscanner.com
  • pcsafetyguide.com
  • mednetsafety.com

Most of the time, These sites are injected into one's browser by way of a Trojan taking over the system. If left untreated these sites will become more and more profound trying to get you to install them. Most of the time these are installed in unsuspecting computers by way of exploits, backdoors, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in mind but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Moderate

Next Page »

Bad Behavior has blocked 951 access attempts in the last 7 days.

© 2009-2010 Tech-Linkblog.com All Rights Reserved -- Copyright notice by Blog Copyright

Tech-Linkblog.com is Digg proof thanks to caching by WP Super Cache

© 2007 Tech-Linkblog.com and Hosted by Justhost and domain through Godaddy, - WordPress Themes by DBT -- Who links to my website?