Today at Lavasoft, we discovered a number of new clones from the XpAntispyware2010 family of rogue security software. The unique aspect of this family is the ability to randomly change its name. Lavasoft Malware Labs found 36 different names on three operating systems (Windows XP, Windows Vista and Windows 7).

The links below lead to snapshots in the Lavasoft Rogue Gallery:


Windows XP

antispywarexp
antivirusxp
totalxpsecurity
xpdefender
xpdefenderpro
xpsecuritytool2010
xpsmartsecurity
xpsmartsecurity2010
xpantimalware
xpantimalware2010
xpsecurity
xpsecuritytool


New Rogue: SmartSecurity

by Albin on March 10th, 2010 in Rogues, Security Alert.

A clone of the annoying and well spread rogue SecurityTool has now been released. It's hosted on a Russian domain and is named SmartSecurity.


A new clone from the MalwareCatcher rogue security software family has now been released. 

The fraud tool is called SecurityAntivirus and will add hundreds of registry keys within:


New Rogue: Antivirus

by Albin on February 8th, 2010 in Rogues, Security Alert.

A new rogue security product was found by Lavasoft Malware Labs this afternoon (UTC+01:00 - Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna). It's called Antivirus and will show a long list of false positives to entice victims into buying the fraud tool.


New Rogue: APcDefender

by Albin on January 7th, 2010 in Rogues, Security Alert.

Today's new Winiguard clone is called APcDefender.



New Rogue: PCprotectar

by Albin on January 7th, 2010 in Rogues, Security Alert.

The Winiguard story continues. This time the clone is called PCprotectar.


New Rogue: PcsProtector

by Albin on January 4th, 2010 in Rogues, Security Alert.

The creators of WiniGuard rogue security software have released their first clone of 2010. This new rogue is called PcsProtector.



Happy New Year!!!

by Albin on December 30th, 2009 in Riff Raff.

New Rogue: SpyEraser

by Albin on December 30th, 2009 in Rogues, Security Alert.

New Rogue: AntivirusPC2009

by Albin on December 29th, 2009 in Rogues, Security Alert.

Is this the last rogue for 2009? The cyber criminals will probably ditch 2009 in their naming after the New Year. AntivirusPC2009 may still trick some people before next year though. The fraud tool downloads files on the system and detects them after a scan has been performed. 


AntispywareShieldPro is a rogue application which will give exaggerated threat reports on the compromised computer, then ask the user to purchase a registered version to remove threats that don't exist.


New Rogue: SystemCleanerPRO

by Albin on December 28th, 2009 in Rogues, Security Alert.

SystemCleanerPRO is a new rogue that was found by Lavasoft Malware Labs today. This fraud tool is a clone of the known rogue AVAntispyware.