New rogue: TrustFighter

by LS Anders on October 13th, 2009 in Rogues, Security Alert.

TrustFighter is the latest clone of the WiniGuard family.

 

 

 

 

 

 

 

 

 

New Rogue: BlockDefense

by LS Anders on August 31st, 2009 in Rogues, Security Alert.

BlockDefense is the latest rogue from the gang that previously provided us with other security software imposters like SaveSoldier and SaveKeep.

 

 

 

 

 

 

 

 

 

 

New Rogue: WindowsSecuritySuite

by LS Anders on July 10th, 2009 in Rogues.

This new rogue, WindowsSecuritySuite, is a clone of previously reported rogues such as VirusMelt, VirusAlarmPro and FastAntiVirus (to name a few).

New Rogue: PCSecurity2009

by LS Anders on July 9th, 2009 in Rogues, Security Alert.

PCSecurity2009 is a new rogue, but it is behaving in the same old way.

New Rogue: Secret Service

by LS Anders on June 29th, 2009 in Rogues, Security Alert.

Secret Service is yet another rogue that is spreading by using fake online scanners.

 

 

 

 

 

 

 

 

 

 

 

 

New rogue: Unvirex

by LS Anders on June 2nd, 2009 in Rogues.

Unvirex is a new rogue that disguises itself as a video codec. While trying to install the codec, the user is told that the codec is going to be scanned for viruses using Unvirex.

 

 

 

 

 

 

 

 

 

 

 

 

New rogue: HomeAntivirus 2009

by LS Anders on April 21st, 2009 in Rogues.

HomeAntivirus 2009 uses many of the normal rogue behaviors. First and foremost, it puts plenty of garbage files on the system that it then detects as malware.

 

 

 

 

 

 

 

 

 

 

 

 

 

New Rogue: Antivirus09

by LS Anders on April 14th, 2009 in Rogues, Security Alerts.

Antivirus09 (or Antivirus’09) is a new rogue that follows the normal rogue procedure. It is distributed through a web page that presents the user with a fake online scanner.

 

 

 

 

 

 

 

 

 

New Rogue: System Protector

by LS Anders on April 2nd, 2009 in Rogues.

System Protector is yet another rogue anti-virus program.  It comes with the normal pretty homepage with some fake press reviews, etc.

 

 

 

 

 

 

 

 

 

 

 

Rogues take advantage of Conficker coverage

by LS Anders on April 1st, 2009 in Rogues, Security Alert.

The recent extensive media coverage of the Conficker worm (see previous blog post) has also attracted the creators of rogue anti-malware software. Pages that claim to show how to get rid of this pest have been hijacked by fake scanners that promote rogue software. Another tactic has been to create pages that offer a product, claiming it will remove Conficker. An example is shown below.

 

 

 

 

 

 

 

 

 

 

 

 

 

New Rogue: SpywareFighter

by LS Anders on February 26th, 2009 in Rogues, Security Alerts.

Today a new rogue was discovered called Spyware Fighter.  It is following the normal patterns with false detections and trying to scare the user into buying a license to clean them.

 

Further it has the classic user friendly home page available under a few similar named domains.

 

SpywareFighter was added to detection in release 0146.0017.

2 New Rogue Anti-Virus Programs

by LS Anders on February 16th, 2009 in Researcher Comments, Security Alerts.

Some new rogue anti-virus programs to be aware of...First out is XPVirusProtection with a standard looking website.

Homepage

© 2009 Lavasoft. All rights reserved.