Tuesday, May 4, 2010

AKM Antivirus 2010 Pro

AKM Antivirus 2010 Pro is a fake Antivirus. This software prevents legit softwares execution and displays fake alerts. AKM Antivirus 2010 Pro is a clone of Your PC Protector.



If you need to clean your computer and AKM Antivirus 2010 Pro is blocking legit cleaners execution, enter the following serial to register: threedollarbillyall

If your PC is infected with AKM Antivirus 2010 Pro use MBAM to remove the infection.

Monday, May 3, 2010

A-Fast Antivirus

A-Fast Antivirus is a fake Antivirus. This rogue prevents legit softwares execution, displays fake alerts and warning messages. A-Fast Antivirus also detects non existent infections to scare users.



If you need to clean your computer and A-Fast Antivirus is blocking legit cleaners execution, enter one of those serials to register:

B0B302F772
C197C46C46
B20C1467B7
041E4B235A
25CCCC7329
9926220EED
A58EC19D33
C15F2FF276
F61E370D62
DDAD6A7A2C
9F8122FE00
3754DD9DA6
3DC52EA100
EE73BBFFA6
7E61C9C7DF
EE34D2E8A7
AA61971AA1
9D2510E3E8

If your PC is infected with A-Fast Antivirus use MBAM to remove the infection.

Thanks to Jaxryley

Sunday, May 2, 2010

Defence Lab

Defence Lab (D.Lab) is a fake antivirus software. The fake scanner test the presence of a winload.dll file at different location:
%SYSTEM%\
%APPDATA%\Mozilla\Firefox\Profiles\Main\
%APPDATA%\Microsoft\SystemBackup\



if the file is present at any of these places (no matter if it is a 0ko file), the rogue displays a list of HardCoded fake infections:

WM/Trojan.Downloader.Get.5
AD/Porn.Adware.Gen
WM/Worm.Sun.E54
BHO/Dropper.Generic
TR/Trojan-Dropper.W32
TR/Trojan.Win32.Swisyn
BD/Malware.Assist
WM/BankTRJ.65
TR/Spyware.NTAP.Gen
BHO/Trojan-Banker.CI
TR/Trojan-Banker.Banbra.QOS

BOOTVID.DLL
pxcpyi64.exe
vrlogon.dll
iexpress.exe
mstime.dll
ieakeng.dll
wisptis.exe
hbaapi.dll
ws2_32.dll
TCPSVCS.EXE
ieui.dll
ntoskrnl.exe
kernel32.dll
user32.dll
userinit.exe
w95inf32.dll
explorer.exe



If your PC is infected with Defence Lab use MBAM to remove the infection.

Monday, April 26, 2010

My Security Engine

My Security Engine is a new fake Antivirus. This rogue drops files on the system and detects them as infected to scare users; files are filled with junk data and do not represent a risk. It replaces Security Guard, CleanUp Antivirus and Security Antivirus (family link)



My Security Engine comes from fake online scanners and porn sites

If your PC is infected with My Security Engine use MBAM to remove the infection.

Sunday, April 25, 2010

AntiSpyware Soft

AntiSpyware Soft is a new fake security application (rogue) (Antivirus Suite and Antivirus Soft clone)

The rogue detects fake infections and prevents legit softwares execution, displaying alert messages to scare users.



If your PC is infected with AntiSpyware Soft use MBAM to remove the infection.

Tuesday, April 13, 2010

Copyright Violation Fake Alert

Like the fake security applications, this malware displays warning messages. This time it is not about Viruses, but illegal content material found on the system.



Entering the following registration code: RFHM2-TPX47-YD6RT-H4KDM
will help cleaning the computer.

To remove this fake Copyright Violation alert, use MBAM.

Sunday, April 11, 2010

Digital Protection

Digital Protection is a fake security application. This rogue prevents legit softwares execution, displays fake alerts and warning messages. Digital Protection also detects non existent infections to scare users. It is from the CoreGuard family (Your Protection, User Protection, Dr. Guard, Paladin Antivirus clone).



If your PC is infected with Digital Protection use MBAM to remove the infection.

Monday, April 5, 2010

User Antivirus 2010

User Antivirus 2010 is a fake security application made by a script kiddie lamer (the same as New Antivirus 2010). Promoted via Youtube, the fake tool is coded with .NET and still has a bogged interface.



This time, the registration routine has been updated:


private void Button1_Click(object sender, EventArgs e)
{
if (this.TextBox2.Text == "2g3iLB xtzu4F seqGIO JYcX9w")
{
Interaction.MsgBox("Registration key is CORRECT!Press 'OK' Button to start User AntiVirus 2010 protecting your Computer! ", MsgBoxStyle.Information, "REGISTRATION SUCCEED");
MySettingsProperty.Settings.entred = Conversions.ToString(true);
MySettingsProperty.Settings.Save();
MySettingsProperty.Settings.Reload();
this.Close();
MyProject.Forms.Form1.Close();
MyProject.Forms.Form8.Show();
}
}

Next time, try to manage wrong serialz ;)

If your PC is infected with User Antivirus 2010 use MBAM to remove the infection.

Saturday, April 3, 2010

New Antivirus 2010

New Antivirus 2010 is a fake security application made by a script kiddie lamer. Promoted via Youtube and hosted on a free hosting service, the fake tool is coded with .NET and has a bogged interface.



There's no way to register New Antivirus 2010, there's no registration code behind the "Activate" button. It always points to the same message: Registration failed!


private void Button1_Click(object sender, EventArgs e)
{
Interaction.MsgBox("Registration failed!The registration key you entered is not listed in our transaction database.Either your order did not come through,or you mistyped the registration key.", MsgBoxStyle.Critical, "Registration Failed");
}



If your PC is infected with New Antivirus 2010 use MBAM to remove the infection.

Friday, April 2, 2010

Your Protection

Your Protection is a fake security application. This rogue prevents legit softwares execution, displays fake alerts and warning messages. Your Protection also detects non existent infections to scare users. It is from the CoreGuard family (User Protection, Dr. Guard, Paladin Antivirus clone).



If your PC is infected with User Protection use MBAM to remove the infection or follow Bleeping Computer's removal guide.

Thanks to Miekiemoes