AVC Plus

AVC Plus is a fake Antivirus. It detects fake infections and displays alert messages to scare users. It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.

AVbytes Multirogue 2015

This Chameleon fake Antivirus is looking for the OS version (XP, Vista, Seven) and changes its name and skin: AVbytes Win 7 Antivirus 2015, AVbytes Win 8 Antivirus 2015, AVbytes Vista Antivirus 2015, (...). It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.

A-Secure 2015

A-Secure 2015 is a fake Antivirus. It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.

Rango MultiRogue 2014

This Chameleon fake Antivirus is looking for the OS version (XP, Vista, Seven) and changes its name and skin: Rango Win 7 Protection 2014, Rango Win 8 Antivirus 2014, Rango Vista Protection 2014, (...). It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.

Zorton Multirogue 2014

This Chameleon fake Antivirus is looking for the OS version (XP, Vista, Seven) and changes its name and skin: Zorton Win 7 Protection 2014, Zorton Win 8 Antivirus 2014, Zorton Vista Protection 2014, (...). It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.


Thanks to @kafeine for the sample

Sirius Multirogue 2014

This Chameleon fake Antivirus is looking for the OS version (XP, Vista, Seven) and changes its name and skin: Sirius Win 7 Protection 2014, Sirius Win 8 Antivirus 2014, Sirius Vista Protection 2014, (...). It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.

Multirogue 2014

This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: Win 7 Protection 2014, Win 8 Antivirus 2014, Vista Protection 2014, (...). It detects fake infections and displays alert messages to scare users. It belongs to the Braviax/FakeRean family.



Thanks to Kafeine

Multirogue 2013

This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: XP Anti-Spyware, XP Home Security 2013, XP Anti-Virus 2013, XP Security 2013 (...). It belongs to the Braviax/FakeRean family. As usual it displays fake warning messages to push users into buying a license.



The rogue is closing legit software. You can register by entering the following serial code 3425-814615-3990 (manual registration).

Edit 14 Nov. 2011:
Serial code was updated: 1089-903874-1875

Win 8 Security System

Win 8 Security System is a fake Antivirus tool. It detects fake infections, displaying alert messages to scare users.



To register (and help removal) enter the following serial: 8F42D6E3-FD18
Greetings go to Sparsha

Multirogue 2012

This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: XP Anti-Spyware, XP Home Security 2012, XP Anti-Virus 2012, XP Security 2012 (...). It belongs to the Braviax family. As usual it displays fake warning messages to push users into buying a license.



If your PC is infected with some of the Braviax family rogue use MBAM to remove the infection.
The rogue is closing legit software. You can register by entering the following serial code 9443-077673-5028 (manual registration).

Multirogue 2012

This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: XP Anti-Spyware, XP Home Security 2012, XP Anti-Virus 2012, XP Security 2012 (...). It belongs to the Braviax family. As usual it displays fake warning messages to push users into buying a license.



If your PC is infected with some of the Braviax family rogue use MBAM to remove the infection.
The rogue is closing legit software. You can register by entering the following serial code 3425-814615-3990 (manual registration).

Advanced PC Shield 2012

Advanced PC Shield 2012 is a fake Antivirus. It belongs to the Braviax family. As usual it displays fake warning messages and prevent legit softwares execution to push users into buying a license.



If your PC is infected with some of the Braviax family rogue use MBAM to remove the infection. The rogue is closing legit software.
You can register by entering the following serial code 8945315-6548431 (manual registration).

Multirogue 2012

A new version of the multi-rogue scareware has been released. This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: XP Anti-Spyware, XP Home Security 2012, XP Anti-Virus 2012, XP Security 2012 (...). It belongs to the Braviax family. As usual it displays fake warning messages to push users into buying a license.





If your PC is infected with some of the Braviax family rogue use MBAM to remove the infection.

The rogue is closing legit software. You can register by entering the following serial code 2233-298080-3424 (manual registration).

Multi Rogue

A new version of the multi-rogue scareware has been released. This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin: XP Anti-Spyware, XP Home Security 2011, XP Anti-Virus 2011, XP Security 2011 (...). It belongs to the Braviax family. As usual it displays fake warning messages to push users into buying a license.







If your PC is infected with some of the Braviax family rogue use MBAM to remove the infection.

The rogue is closing legit software. You can register by entering the following serial code 1147-175591-6550 (manual registration). Thanks to Xylitol :p

Multi Rogue

This rogue is the 2011 version of the multi-rogue scareware. This malware is looking for the OS version (XP, Vista, Seven) and changes its name and skin.

XP Security 2011


XP Antispyware 2011


The rogue is closing legit software. You can register by entering the following serial code 1145-17884799-7733 (manual registration).
If your PC is infected with some of the Braviax family rogue, use MBAM to remove the infection.

Win 7 Antispyware 2010

Win 7 Antispyware 2010 is the new Braviax family rogue (Antivirus Pro 2010, PC Antispyware 2010, Home Antivirus 2010, PC Security 2009, Home Antivirus 2009).

Win 7 Antispyware 2010 detects fake infections on a clean system to scare users. It is also changing it's name (self renaming):

Win 7 Antispyware 2010


Win 7 Internet Security 2010


On Windows XP, the rogue has a different GUI.

Antivirus XP 2010


XP Guardian


XP Internet Security


On Windows Vista, it has a Vista based name.
Vista Antivirus Pro 2010


Vista Internet Security 2010


The rogue register itself to be run with .exe binaries. It looks at the processes in memory and stops legit security tools.

If your PC is infected with some of the Braviax family rogue, use MBAM to remove the infection.

Antivirus Pro 2010

Antivirus Pro 2010 is the new Braviax family rogue (PC Antispyware 2010, Home Antivirus 2010, PC Security 2009, Home Antivirus 2009).

The rogue creates fake files on the system and detects it as malware to scare users.



Thanks to Malekal and Sparsha

PC Antispyware 2010

PC Antispyware 2010 is a fake security software (rogue) from the Braviax family: Home Antivirus 2010, PC Security 2009, Home Antivirus 2009.

The rogue creates fake files on the system and detects it as malware to scare users.



Once registered, the rogues updates the database:
hxxp://ertubedewse.com/updates/main.cvd
But its database is from ClamAV and its date is 09 Dec 2007 (a bit outdated).
ClamAV-VDB:09 Dec 2007 15-50 +0000:45:169676:21:b35429d8d5d60368eea9630062f7c75a:

Home Antivirus 2010

Home Antivirus 2010 is a fake security software (rogue) from the family of PC Security 2009, Home Antivirus 2009. It displays alerts messages and creates files on the system to simulate an infection (fake PE or VB Script filled with junk).

Home Antivirus 2010 also replaces the original Windows Security Center by its own, and force the Control Panel to be displayed with the classic view.



Thanks to Bharath

PC Security 2009

PC Security 2009 is a fake security software (rogue) from the family of Home Antivirus 2009. It displays alerts messages and creates files on the system to simulate an infection (fake PE or VB Script filled with junk).

PC Security 2009 replaces the original Windows Security Center by its own, and force the Control Panel to be displayed with the classic view.



Thanks to Bharath