Sunday, February 24, 2008

Spyware Remover

SpywareRemover is a rogue installed by a Malware.
This infection displays a fake alert message and download/install the rogue.



Friday, February 22, 2008

Topantispyware

This infection changes the background, prevents user from changing it, displaying Process Manager, Typing URL in IE. It also displays many fakes alert and popup messages.





Monday, February 11, 2008

LiveKill by Live-Prod

LiveKill is a MSN infections cleaner. The kids behind Livekill have made a tool with informations 'retrieved' (stolen) from Laurent's MSNFix cleaner. MAD has published an article (in french) about this team.

EDIT: Link removed. Since publication of the article, Live-Prod has decided to stop LiveKill development, livekill.org and live-prod.com are now closed.

Sunday, February 10, 2008

NetProject - Zlob alerts

Netprotect is the new name of a Zlob componant installed with VirusHeat rogue. It displays a fake Security Center window, hijacks Internet Explorer with a Security Toolbar and popups fake alerts.





Saturday, February 9, 2008

MalwareCrush 3.7

MalwareCrush is a rogue that looks like: VirusHeat, VirusProtect, VirusRay, Antivir Gear, VirusProtectPro , SpyDown, SpywareQuake.

Video ActiveX Object Error

Fake Video suggesting Fake Codec installation, and dropping Video Access Codec Malware (Toolbars, Fake Alerts, URL Redirections) to suggest user to install rogue software.

Friday, February 8, 2008

VirusHeat 3.9

A new rogue VirusHeat rogue has been released. This rogues looks like: VirusProtect, VirusRay, Antivir Gear, VirusProtectPro , SpyDown, SpywareQuake.

Monday, February 4, 2008

IE Codec

IE Codec fake alerts display error messages and change desktop wallpaper encourage users to install AntiVirusPro Rogue.




Saturday, February 2, 2008

Video ActiveX Object Error

Fake Video suggesting Fake Codec installation, and dropping DNS.Changer Malware.