New Rogue! PAntispyware09

by Albin on April 16th, 2009 in Rogues, Security Alerts.

PAntispyware09 is a new rogue anti-spyware application and a clone of MsAntispyware2009. It will give exaggerated threat reports on the compromised computer, then ask the user to purchase a registered version to remove threats which do not exist.

New Rogue: Antivirus09

by LS Anders on April 14th, 2009 in Rogues, Security Alerts.

Antivirus09 (or Antivirus’09) is a new rogue that follows the normal rogue procedure. It is distributed through a web page that presents the user with a fake online scanner.

 

 

 

 

 

 

 

 

 

New Rogue! Antispyware Pro 2009

by Albin on March 6th, 2009 in Rogues, Security Alerts.

Antispyware Pro 2009 is a new rogue anti-spyware application. It will give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove threats which don't exist.

Fraudulent SMS domains!

by Albin on February 27th, 2009 in Researcher Comments, Security Alerts.

Lavasoft Malware Labs recently had a closer look on an IP range full of hoax sites. Reverse IP on 78.129.142.235 will reveal around 200 fraudulent domains which are hosted in United Arab Emirates.  Most of the sites hosted under 78.129.142.235 will use and take advantage of already existing products from the security industry and other popular software. The examples below display their way to make illegal domains look reliable.

hxxp://7zip-2009.info
hxxp://Directx-full.info
hxxp://Icq-full.info
hxxp://Messengerplus-2009.info
hxxp://Safari-full.info
hxxp://Winrar-2009.com
hxxp://Www-kaspersky.info

New Rogue: SpywareFighter

by LS Anders on February 26th, 2009 in Rogues, Security Alerts.

Today a new rogue was discovered called Spyware Fighter.  It is following the normal patterns with false detections and trying to scare the user into buying a license to clean them.

 

Further it has the classic user friendly home page available under a few similar named domains.

 

SpywareFighter was added to detection in release 0146.0017.

© 2009 Lavasoft. All rights reserved.