InSysSecure

InSysSecure is a fake serurity software (rogue) from the Winisoft family (SysProtector, APcDefender, PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



InSysSecure comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

SysProtector

SysProtector is a fake serurity software (rogue) from the Winisoft family (APcDefender, PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



SysProtector comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

APcDefender

APcDefender is a fake serurity software (rogue) from the Winisoft family (PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



The new version of this rogue family was named PCprotectar. But it was quickly renamed APcDefender.

APcDefender comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

PcsProtector

PcsProtector is a fake serurity software (rogue) from the Winisoft family (GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)






Snapshot Credit: Bharath


Snapshot Credit: Bharath

PcsProtector comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

No Malware

No Malware is a new fake security software (rogue).



Updating No Malware to its last DataBase version the only definitions found in memory are from an outdated Malwarebytes' Anti-Malware DB (25 November 2009) ! oO
No Malware uses parts of MBAM DataBase for detection, but it has not the adequate engine to use the full database. Stay away from stealer !

nomalwares.org (88.214.204.221)
malwaremechanic.com (72.9.100.115)

Internet Security 2010

Internet Security 2010 is a fake security software (rogue). It replaces Advanced Virus Remover.



Internet Security 2010 displays fake infections to incite users into buying a license. It also blocks softwares execution displaying an error message:

Application cannot be executed. The file is infected. Please activate your antivirus software.

Internet Security 2010 comes from fake online scanners and malicious porn sites using exploits to run a Trojan Downloader.

The Trojan Downloader also displays many fake errors. When running some media player process (QuickTimePlayer.exe, AdvancedDVDPlayer.exe, tvp.exe, realplay.exe, windvd.exe, winamp.exe, setup_wm.exe, LA.exe, PowerDVD.exe, mplayerc.exe, wmplayer.exe) it displays an error message and redirects to vs-codec-pro.net (193.104.110.50) page.

Windows can`t play the folowing media formats: AVI;WMV;AVS;FLV;MKV;MOV;3GP;MP4;MPG;MPEG;MP3;AAC;WAV;WMA;CDA;FLAC;M4A;MID. Update your video and sound codec to resolve this issue.

advanced-virus-remover-2009.com (193.104.110.50)
advanced-virusremover-2010.com (193.104.110.50)
advanced-virusremover2009.com (193.104.110.50)
advancedvirus-remover-2010.com (193.104.110.50)
advancedvirusremover-2010.com (193.104.110.50)
avrdownnew5.com (193.104.110.50)
avrdownnew6.com (193.104.110.50)
avrdownnew7.com (193.104.110.50)
avrdownnew8.com (193.104.110.50)
avrdownnew9.com (193.104.110.50)
buy-internet-security2010.com (193.104.110.50)
buy-internetsecurity-2010.com (193.104.110.50)
buy-internetsecurity2010.com (193.104.110.50)
buyinternet-security-2010.com (193.104.110.50)
buyinternet-security2010.com (193.104.110.50)
coolcount1.com (193.104.110.50)
downloadavr13.com (193.104.110.50)
downloadavr14.com (193.104.110.50)
downloadavr15.com (193.104.110.50)
downloadavr20.com (193.104.110.50)
downloadavr7.com (193.104.110.50)
greatcrypt.com (193.104.110.50)
pc-scanner-2010.com (193.104.110.50)
pc-scanner-2010.org (193.104.110.50)
pc-scanner-2011.biz (193.104.110.50)
pc-scanner-2011.com (193.104.110.50)
pc-scanner-2011.org (193.104.110.50)
pc-scanner-2012.net (193.104.110.50)
pc-scanner-2012.org (193.104.110.50)
pc-scanner2010.com (193.104.110.50)
pc-scanner2010.net (193.104.110.50)
pc-scannerr.us (193.104.110.50)
pcscanner2010.org (193.104.110.50)
scanner-pc-2010.net (193.104.110.50)
testavrdown.com (193.104.110.50)
vs-codec-pro.net (193.104.110.50)
vsproject.net (193.104.110.50)
white-xxx-tube.com (193.104.110.50)
white-xxxx-tube.net (193.104.110.50)
xxx-white-tube.net (193.104.110.50)

If your PC is infected with Internet Security 2010, follow the BleepingComputer removal guide.

SysDefence

SysDefence is a fake serurity software (rogue) from the Winisoft family (TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



SysDefence comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

TheDefend

TheDefend is a fake serurity software (rogue) from the Winisoft family (GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



TheDefend comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.
Thanks to Bharath.

GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop

GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop are fake serurity softwares (rogues) from the Winisoft family (SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



















GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop come from fake online antivirus scanners or fake video codecs. They create random files on the system and detects them as infected. They also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

Some pics are from Bharath's blog.

Fast Antispyware

Fast Antispyware is a fake security application from Hydra Networks.



If your PC is infected with Fast Antispyware use MBAM to remove the infection.