Friday, January 29, 2010

MyPcSecure

MyPcSecure (My Pc Secure) is a fake security software (rogue) from the Winisoft family (PcSecureNet, PcsSecure, APcSafe, APcSecure, DefendAPc, SysDefenders, InSysSecure, SysProtector, APcDefender, PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



MyPcSecure comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

Thursday, January 28, 2010

Antivir 2010

Antivir 2010 is a new fake security application.

Antivir 2010 takes its name from the real Antivir Antivirus by Avira. Antivir 2010 detects fake infections on a clean system to scare users. It also installs a BHO to display error messages in Internet Explorer.



If your PC is infected with Antivir 2010 use MBAM to remove the infection.

Wednesday, January 27, 2010

Win 7 Antispyware 2010

Win 7 Antispyware 2010 is the new Braviax family rogue (Antivirus Pro 2010, PC Antispyware 2010, Home Antivirus 2010, PC Security 2009, Home Antivirus 2009).

Win 7 Antispyware 2010 detects fake infections on a clean system to scare users. It is also changing it's name (self renaming):

Win 7 Antispyware 2010


Win 7 Internet Security 2010


On Windows XP, the rogue has a different GUI.

Antivirus XP 2010


XP Guardian


XP Internet Security


On Windows Vista, it has a Vista based name.
Vista Antivirus Pro 2010


Vista Internet Security 2010


The rogue register itself to be run with .exe binaries. It looks at the processes in memory and stops legit security tools.

If your PC is infected with some of the Braviax family rogue, use MBAM to remove the infection.

PcSecureNet

PcSecureNet is a fake security software (rogue) from the Winisoft family (PcsSecure, APcSafe, APcSecure, DefendAPc, SysDefenders, InSysSecure, SysProtector, APcDefender, PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



PcSecureNet comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

Live Entreprise Suite

Live Entreprise Suite is a fake security application. Replaces Internet Antivirus Pro.

Live Entreprise Suite detects fake infections on a clean system to scare users. Installed from fake online security scanners, it comes with TDSS RK.



If your PC is infected with Live Entreprise Suite, follow the BleepingComputer removal guide.

Spy Doc Pro

SpyDocPro is a fake security software. It is edited by the same editor who release PC Doc Pro.



pcdocpro.com (72.52.146.60)
spydocpro.com (72.52.146.60)
spyresearchcenter.com (72.52.146.60)

Registry Elite

Registry Elite is a fake registry cleaner. It detects Fake registry problems, file association errors and other symptoms on a brand new system (383 errors on this capture test (Windowns XP SP3 installed few minutes ago).



registryelite.com (67.227.208.84)
tweaklogic.com (67.227.208.84)

Registry Elite is a clone of PC Doc Pro

PC Doc Pro

PC Doc Pro is a fake registry cleaner. It detects Fake registry problems, file association errors and other symptoms on a brand new system (192 errors on this capture test (Windowns XP SP3 installed few minutes ago).



pcdocpro.com (72.52.146.60)
spydocpro.com (72.52.146.60)
spyresearchcenter.com (72.52.146.60)

PC Doc Pro is a clone of Registry Elite

Monday, January 25, 2010

PcsSecure

PcsSecure is a fake security software (rogue) from the Winisoft family (APcSafe, APcSecure, DefendAPc, SysDefenders, InSysSecure, SysProtector, APcDefender, PcsProtector, GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SiteVillain, LinkSafeness, SecureKeeper, AntiAID, System Warrior, System Veteran, System Fighter, Block Protector, Block Keeper, Block Scanner, Block Watcher, SoftBarrier, Shield Safeness, Soft Stronghold, Soft Veteran, SoftCop, Soft Soldier, Trust Fighter, Trust Soldier, Safe Fighter, Trust Cop, Secure Warrior, Secure Fighter, Secure Veteran, Security Soldier, Security Fighter, Save Armor, Save Defender, Trust Warrior, Soft Safeness, Safety Keeper, Save Keeper, Quick Heal Cleaner, System Cop, Block Defense, Save Defense, Trust Ninja, Save Soldier, Save Keep, Winishield, Wini Fighter, WiniBlueSoft)



PcsSecure comes from fake online antivirus scanners or fake video codecs, creates random files on the system and detects them as infected. It also display a lot of disturbing warning messages to scare users.

If your PC is infected with some of the WiniSoft family rogue, use MBAM to remove the infection.

SpyEraser

SpyEraser is a fake security software. It detects non existent infections to scare users pushing them to buy a license.



spyeraser-security.com (193.104.110.81)
spyeraser.ir (193.104.110.81)
spyeraser-software.ru (193.104.110.81)
spyeraser-trial.com (193.104.110.81)
spyeraserstore.com (193.104.110.81)
vipimagine.cn (193.104.110.81)