Wednesday, September 29, 2010

Smart Security

Smart Security is a new fake Antivirus. This rogue drops files on the system and detects them as infected to scare users; files are filled with junk data and do not represent a risk. It replaces My Security Shield, Security Master AV, My Security Engine, Security Guard, CleanUp Antivirus and Security Antivirus (family link)



Smart Security name was already used by a previous rogue:



Smart Security comes from fake online scanners and porn sites

If your PC is infected with Smart Security use MBAM to remove the infection.

Friday, September 24, 2010

Trojan.Ransom (Microsoft Security Antivirus)

This trojan blocker ( MD5: 67E58ED1BB7F3AE1DC04FF2EC3E69594 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 89654029290
Number to Call: 89654029642
Number to Call: 89654028568
Number to Call: 89654028650
Code to unlock Windows: 5777tyyghhg5

Run MBAM to remove the infection.

Thursday, September 23, 2010

Antivirus8

Antivirus 8 is a fake Antivirus (rogue). It detects and display fake infections to scare users pushing them into buying a license.



If your PC is infected with Antivirus8 follow the Bleepingcomputer Uninstall Guide with MBAM.

Trojan.Ransom

This trojan prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 2 Phone Text Messages and an email to acid.david9(a)gmail.com



Code to unlock Windows: DIFAAAAAAAAAAAAAAAAAAAAAAAAA

Run MBAM to remove the infection.

Thanks to Xylitol

Wednesday, September 22, 2010

Trojan.Ransom (Microsoft Security Antivirus)

This trojan blocker ( MD5: 623366577BA40DE62EC64CB0229BCF26 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 41001729647665
Code to unlock Windows: CO40927445

Run MBAM to remove the infection.

Friday, September 17, 2010

Antivirus 2010 Security Center

Antivirus 2010 Security Center is a fake Antivirus tool. It displays fake alert and notifications to push users into buying a license.



It also modifies (DesktopHijack) the desktop background:



If your PC is infected with Antivirus 2010 Security Center use MBAM to remove the infection.

Tuesday, September 14, 2010

Trojan.Ransom (Microsoft Security Antivirus)

This trojan blocker ( MD5: 7C42C6554DD9945627D3A34E86E0CC46 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 89030064258
Number to Call: 89030064960
Number to Call: 89030065384
Number to Call: 89030139997
Code to unlock Windows: 720194320Q

Run MBAM to remove the infection.

Trojan.Ransom (Microsoft Security Antivirus)

This trojan blocker ( MD5: CF0A2AC1B93B4F0781F1B8B23322400B ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 89030139823
Number to Call: 89030065742
Code to unlock Windows: 77294738T

Run MBAM to remove the infection.

Iron Defense

Iron Defense is a fake security software (rogue) from the Winisoft family (Iron Defender, Protect Soldier, Protect Defender, Armor Defender, DefendAPc, REAnti, ...)



Iron Defense comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with Iron Defense, use MBAM to remove the infection.

Iron Defender

Iron Defender is a fake security software (rogue) from the Winisoft family (Protect Soldier, Protect Defender, Armor Defender, DefendAPc, REAnti, ...)



Iron Defender comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with Iron Defender, use MBAM to remove the infection.

Wednesday, September 8, 2010

Malware Destructor 2011

Malware Destructor 2011 is a rogue anti-malware application. This program acts like a legitimate security program, but displays fake alerts and warning messages to scare users. Pushing them to buy a license. It is a clone of Antimalware Doctor.



Rogue name Malware Destructor (Malware Destructor 2009) was already used in the past by another rogue familly:



If your computer is infected with Malware Destructor 2011 use MBAM to remove the infection.

Tuesday, September 7, 2010

Trojan.Ransom

This trojan blocker ( MD5: 6FB9B24170137B01C6FB8307585BA059 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 89654028516
Number to Call: 89654028759
Number to Call: 89654028794
Code to unlock Windows: 403947563!

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: C646CA386F67307CE7CCC3970180B9BC ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number.



Number to Call: 89654028519
Code to unlock Windows: $334327890$

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: 9349A503EE6F62FC08C33480F911E41B ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 410 RUB (13 USD) by calling a Message Box.



Number to Call: 89654028477
Number to Call: 89654028491
Number to Call: 89654028518
Code to unlock Windows: $009264834$

Run MBAM to remove the infection.

Monday, September 6, 2010

Trojan.Ransom

This trojan blocker ( MD5: 1C086CAAAD378DAB17423E33E0F31136 )prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654029566
Number to Call: 89654027451
Number to Call: 89654027460
Number to Call: 89651027649
Number to Call: 89654027716
Number to Call: 89654027791
Number to Call: 89654031266
Code to unlock Windows: =403967434=

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: C19A12C2E30D65FAAD688A56147CA94D, BD983B00D8C4EBBCA9A03438D6478F2A )prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654027472
Number to Call: 89654030462
Number to Call: 89654031266
Number to Call: 89651788234
Number to Call: 89651076546
Code to unlock Windows: (10495726)

Run MBAM to remove the infection.

Sunday, September 5, 2010

Trojan.Ransom

This trojan blocker ( MD5: ED9CB2F3D3DA05FC5ED9DB498376ABA6 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028171
Number to Call: 89654028195
Number to Call: 89654028295
Code to unlock Windows: %10923810%

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: 013A58394C1E2A9CAFCA54466A25C663 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028821
Code to unlock Windows: &4920465&

Run MBAM to remove the infection.

Saturday, September 4, 2010

Trojan.Ransom

This trojan blocker ( MD5: D744F88F3BFA6F7D6520549BBF1DBE7A ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028171
Number to Call: 89654028195
Number to Call: 89654028295
Code to unlock Windows: %10923810%

Run MBAM to remove the infection.

Friday, September 3, 2010

Trojan.Ransom

This trojan blocker ( MD5: 673C282801BA46551C418EEB1DAE88BE ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028168
Number to Call: 89654028194
Number to Call: 89654028201
Number to Call: 89654028205
Number to Call: 89654028250
Number to Call: 89654028290
Number to Call: 89654028293
Code to unlock Windows: #5020543#

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: 7D9A08F78BF638443FD5CBBEEAD245B0 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028569
Number to Call: 89654028703
Code to unlock Windows: !8912034'

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: 79009501426084A57B2A75E62A65C236 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028578
Number to Call: 89654028597
Number to Call: 89654028594
Number to Call: 89654028566
Number to Call: 89654028563
Number to Call: 89654028583
Number to Call: 89654028725
Number to Call: 89654028717
Number to Call: 89654028703
Code to unlock Windows: (30958374)

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: F4F88E9B90FD587D992B2E0B226A4293 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89654028562
Number to Call: 89654028563
Number to Call: 89654028590
Number to Call: 89654028595
Number to Call: 89654028598
Number to Call: 89654028578
Number to Call: 89654028614
Number to Call: 89654028723
Code to unlock Windows: ~2058205~

Run MBAM to remove the infection.

Wednesday, September 1, 2010

Trojan.Ransom

This trojan blocker ( MD5: 6E4ECC96A88E36C9EC12D4B500AEF331 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89057635571
Number to Call: 89055280241
Number to Call: 89055280410
Number to Call: 89636385675
Number to Call: 89636385700
Number to Call: 89636385707
Number to Call: 89636385755
Code to unlock Windows: $73747589$

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89629911485
Number to Call: 89629910275
Number to Call: 89629911932
Number to Call: 89629911658
Code to unlock Windows: 10200000000000003

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89652404438
Code to unlock Windows: !48950345!

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89653625352
Code to unlock Windows: @34208923@

Run MBAM to remove the infection.

Trojan.Ransom

This trojan blocker ( MD5: B6774A1D74EC80DA95666006B8C7E271 ) prevent all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number they get by sending 400 RUB (12,9 USD) by calling a Message Box.



Number to Call: 89055282108
Code to unlock Windows: ^77723094^

Run MBAM to remove the infection.