36 New Rogue Clones

by Albin on March 19th, 2010 in Security Alert, Security Alerts.

Today at Lavasoft, we discovered a number of new clones from the XpAntispyware2010 family of rogue security software. The unique aspect of this family is the ability to randomly change its name. Lavasoft Malware Labs found 36 different names on three operating systems (Windows XP, Windows Vista and Windows 7).

The links below lead to snapshots in the Lavasoft Rogue Gallery:

 

Windows XP

antispywarexp
antivirusxp
totalxpsecurity
xpdefender
xpdefenderpro
xpsecuritytool2010
xpsmartsecurity
xpsmartsecurity2010
xpantimalware
xpantimalware2010
xpsecurity
xpsecuritytool

New Rogue: Antivirus7

by LS Anders on March 16th, 2010 in Rogues, Security Alert.

Antivirus7 is a new rogue anti-virus application. It is a clone of the rogue Antivir.













New Rogue: CleanUpAntivirus

by LS Anders on March 15th, 2010 in Rogues, Security Alert.

CleanUpAntivirus is a new rogue anti-spyware application. It is a clone of the SmartVirusEliminator family.














New Rogue: SmartSecurity

by Albin on March 10th, 2010 in Rogues, Security Alert.

A clone of the annoying and well spread rogue SecurityTool has now been released. It's hosted on a Russian domain and is named SmartSecurity.

New Rogue: VirusProtector

by LS Anders on March 8th, 2010 in Rogues, Security Alert.

VirusProtector is the latest (fourth) generation of the WiniGuard rogue anti-malware family.














New Rogue: DrGuard

by LS Anders on March 3rd, 2010 in Rogues, Security Alert.

DrGuard is a new rogue anti-virus application. It is a clone of PaladinAntivirus.














Microsoft Warning on the F1 Key

by Erin on March 2nd, 2010 in Industry and Security News, Security Alert.

A word of caution: Microsoft has issued a warning on an unpatched vulnerability that could affect users of Windows 2000, Windows XP, and Windows Server 2003, running Internet Explorer.

“The vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer,” the security advisory reads. “If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed…”

New Rogue: DesktopSecurity2010

by LS Anders on February 22nd, 2010 in Rogues, Security Alert.

DesktopSecurity2010 is a new rogue anti-spyware application. It is a clone of DesktopDefender2010.















New Rogue: SecurityEssentials2010

by LS Anders on February 15th, 2010 in Rogues, Security Alert.

SecurityEssentials2010 is a rogue anti-spyware application. It is a clone of InternetSecurity2010.














New Rogue: SecurityAntivirus

by Albin on February 9th, 2010 in Security Alert, Security Alerts.

A new clone from the MalwareCatcher rogue security software family has now been released. 

The fraud tool is called SecurityAntivirus and will add hundreds of registry keys within:

New Rogue: PaladinAntivirus

by LS Anders on February 8th, 2010 in Rogues, Security Alert.

PaladinAntivirus is a new rogue anti-spyware application. It is a clone of ProtectionSystem.














New Rogue: Antivirus

by Albin on February 8th, 2010 in Rogues, Security Alert.

A new rogue security product was found by Lavasoft Malware Labs this afternoon (UTC+01:00 - Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna). It's called Antivirus and will show a long list of false positives to entice victims into buying the fraud tool.

© 2010 Lavasoft. All rights reserved.