<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>411 on Spyware</title>
	<atom:link href="http://www.411-spyware.com/feed" rel="self" type="application/rss+xml" />
	<link>http://www.411-spyware.com</link>
	<description>411-Spyware.com</description>
	<lastBuildDate>Tue, 03 Nov 2009 22:14:46 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>BlockKeeper</title>
		<link>http://www.411-spyware.com/remove-blockkeeper</link>
		<comments>http://www.411-spyware.com/remove-blockkeeper#comments</comments>
		<pubDate>Tue, 03 Nov 2009 22:02:59 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Block Keeper]]></category>
		<category><![CDATA[BlockKeeper]]></category>
		<category><![CDATA[BlockKeeper.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5600</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/11/BlockKeeper.gif" title="BlockKeeper screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/11/BlockKeeper.gif" class="alignleft" alt="BlockKeeper screenshot" /></a>  <strong>BlockKeeper </strong>is another vicious piece of malware from the people who gave us <a href="../remove-blockwatcher">BlockWatcher</a>, <a href="../remove-softbarrier">SoftBarrier</a>, and about 30 other delightful little pests that have kept us busy. Like the others, this one hijacks your browser, spams your desktop, and displays fake security alerts warning of made-up viruses. For example, one BlockKeeper pop-up says:
<blockquote>Security Center Alert!

Infiltration Alert!

Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar.

Details

Attack from: 14.77.159.55

Attacked port: 1848

Threat: Password-stealer

Do you want BlockKeeper to block this attack?</blockquote>
Sounds fun, huh? The goal of these alerts is to get you to click the “Yes” button, which brings you to a screen that urges you to pay for full protection. Not a good idea, as you’ll be waiting around for your full protection for a very long time.

Not a fan of handing free cash to money-grubbing scammers? Let me show you how to remove BlockKeeper from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-blockkeeper/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BlockWatcher</title>
		<link>http://www.411-spyware.com/remove-blockwatcher</link>
		<comments>http://www.411-spyware.com/remove-blockwatcher#comments</comments>
		<pubDate>Sun, 01 Nov 2009 02:13:02 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[10068tro9zd85.exe]]></category>
		<category><![CDATA[Block Watcher]]></category>
		<category><![CDATA[BlockWatcher]]></category>
		<category><![CDATA[BlockWatcher.exe]]></category>
		<category><![CDATA[yxh5.tmp.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5595</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/BlockWatcher.gif" title="BlockWatcher screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/BlockWatcher.gif" class="alignleft" alt="BlockWatcher screenshot" /></a> Here’s <strong>BlockWatcher</strong>, the latest spawn from the same malware netherworld that tormented us with <a href="../remove-softveteran">SoftVeteran</a>, <a href="../remove-softcop">SoftCop</a>, and about 30 other nasty little blue and white demons. These things just keep on haunting us, but the good news is that there is an easy formula to cast them out.

If you’re not careful, Block Watcher enters your computer as a Trojan and nests deep in your computer’s innards. Then, BlockWatcher pop-ups come out of the woodwork to frighten you with phony system scans showing all sorts of spooky-looking fake viruses. The goal is to scare you into handing over cash for a full version that never arrives.

Ready to send this badware ghoul back to where it came from? I’ll show you how to remove BlockWatcher from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-blockwatcher/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BlockScanner</title>
		<link>http://www.411-spyware.com/remove-blockscanner</link>
		<comments>http://www.411-spyware.com/remove-blockscanner#comments</comments>
		<pubDate>Sun, 01 Nov 2009 01:10:29 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[111249acztool1ef5.exe]]></category>
		<category><![CDATA[1649zt5oj447.exe]]></category>
		<category><![CDATA[Block Scanner]]></category>
		<category><![CDATA[BlockScanner]]></category>
		<category><![CDATA[BlockScanner.exe]]></category>
		<category><![CDATA[vwc4.tmp.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5590</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/BlockScanner.gif" title="BlockScanner screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/BlockScanner.gif" class="alignleft" alt="BlockScanner screenshot" /></a> <strong>BlockScanner </strong>is a new rogue from the makers of <a href="../remove-softbarrier">SoftBarrier</a>, <a href="../remove-shieldsafeness">ShieldSafeness</a>, and dozens of others. It uses all the typical techniques to deceive you into thinking it’s legit, but what these scammers really want is to take your money and run, never to be seen again—at least until a couple days from now when they release BlockBarrier, or whatever they call the next one.

Their techniques are pretty simple: Block Scanner gets into your computer by tricking you into thinking you’re downloading something else. Once installed, BlockScanner pop-ups show fake system scans alerting you to made-up viruses supposedly on your computer. Then, they ask for money for “full protection” (a.k.a. no protection at all).

Want to save your money for products that actually exist? Let me show you how to remove BlockScanner from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-blockscanner/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows Enterprise Suite</title>
		<link>http://www.411-spyware.com/remove-windows-enterprise-suite</link>
		<comments>http://www.411-spyware.com/remove-windows-enterprise-suite#comments</comments>
		<pubDate>Thu, 29 Oct 2009 21:40:22 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[cb.exe]]></category>
		<category><![CDATA[eb.exe]]></category>
		<category><![CDATA[ppal.exe]]></category>
		<category><![CDATA[WE83b.exe]]></category>
		<category><![CDATA[Windows Enterprise Suite]]></category>
		<category><![CDATA[WindowsEnterpriseSuite]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5581</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/Windows-Enterprise-Suite.gif" title="Windows Enterprise Suite screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/Windows-Enterprise-Suite.gif" class="alignleft" alt="Windows Enterprise Suite screenshot" /></a> <strong>Windows Enterprise Suite </strong>is more badware from the people behind <a href="../remove-volcano-security-suite">Volcano Security Suite</a> and <a href="../remove-windows-enterprise-defender">Windows Enterprise Defender</a>. I wish there were something fun or unique to say about this new release, but it’s boringly similar to the others, so there you have it. Windows Enterprise Suite: More of the same.

It will enter your computer through aggravatingly sneaky tactics, and it will immediately begin annoying you with Windows Enterprise Suite pop-ups displaying fake system scans. It’ll say your computer is infected with a bunch of phony viruses, and then it’ll ask for money. Don’t fall for it: Their “full protection” is a myth. 

Not interested in giving free handouts to online scammers? I’ll show you how to remove Windows Enterprise Suite, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-windows-enterprise-suite/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Password Reset Confirmation</title>
		<link>http://www.411-spyware.com/facebook-password-reset-confirmation</link>
		<comments>http://www.411-spyware.com/facebook-password-reset-confirmation#comments</comments>
		<pubDate>Wed, 28 Oct 2009 21:06:02 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Phishing Emails]]></category>
		<category><![CDATA[Facebook Password Reset Confirmation]]></category>
		<category><![CDATA[isqsys32.exe]]></category>
		<category><![CDATA[wiaservg.log]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5575</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/Facebook-Password-Reset-Confirmation.gif" title="Facebook Password Reset Confirmation screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/Facebook-Password-Reset-Confirmation.gif" class="alignleft" alt="Facebook Password Reset Confirmation screenshot" /></a> If you’ve received the “<strong>Facebook Password Reset Confirmation</strong>” email, you’re being targeted by scammers. Over the past few days, thousands of Facebook users have received emails pretending to be from “The Facebook Team” at support@facebook.com. The emails contain an attachment called something like “Facebook_Password_c92dd.zip,” which includes the file Facebook_Password_ c92dd.exe”—although that set of five numbers and letters is randomly generated for each email. The text of the email says:



<blockquote>Because of the measures taken to provide safety to our clients, your password has been changed.

You can find your new password in attached document.

Thanks,

The Facebook Team</blockquote>



Instead of delivering a new password, the attachment will install a piece of malware in the Bredolab family of viruses, which can take control of your PC and steal information including passwords and credit card numbers. It may also display more spam on your computer, while downloading additional viruses and bots. Sounds like loads of fun.

If you downloaded this bot, don’t smash your computer just yet. Let me show you how to remove this infection, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/facebook-password-reset-confirmation/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SoftBarrier</title>
		<link>http://www.411-spyware.com/remove-softbarrier</link>
		<comments>http://www.411-spyware.com/remove-softbarrier#comments</comments>
		<pubDate>Wed, 28 Oct 2009 20:47:31 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[11249acztool1ef5.exe]]></category>
		<category><![CDATA[Soft Barrier]]></category>
		<category><![CDATA[SoftBarrier]]></category>
		<category><![CDATA[SoftBarrier.exe]]></category>
		<category><![CDATA[vwc4.tmp.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5572</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/SoftBarrier.gif" title="SoftBarrier screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/SoftBarrier.gif" class="alignleft" alt="SoftBarrier screenshot" /></a> <strong>SoftBarrier </strong>is another clone from the huge demented malware factory that brought us gems like <a href="../remove-shieldsafeness">ShieldSafeness</a>, <a href="../remove-softstronghold">SoftStronghold</a>, <a href="../remove-softcop">SoftCop</a>, and about 30 others. Yup, the hits just keep on coming with these guys, and I’m sure we have plenty more to look forward to. Gee, I wonder if they’ll be blue and white.

Like all the others, Soft Barrier rides into your computer on the back of some other download. Its SoftBarrier pop-ups begin immediately, performing fake system scans whose purpose is to scare you into thinking your computer is infected. It then asks for money for a full version that will never arrive.

Not interested in paying for a figment of some web-crook’s imagination? I’ll show you how to remove SoftBarrier from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-softbarrier/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Desktop Defender 2010</title>
		<link>http://www.411-spyware.com/remove-desktop-defender-2010</link>
		<comments>http://www.411-spyware.com/remove-desktop-defender-2010#comments</comments>
		<pubDate>Wed, 28 Oct 2009 20:25:50 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[Desktop Defender 2010]]></category>
		<category><![CDATA[Desktop Defender 2010.exe]]></category>
		<category><![CDATA[gedx_ae09.exe]]></category>
		<category><![CDATA[kgn.exe]]></category>
		<category><![CDATA[kn.a.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5565</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/Desktop-Defender-2010.gif" title="Desktop Defender 2010 screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/Desktop-Defender-2010.gif" class="alignleft" alt="Desktop Defender 2010 screenshot" /></a> <strong>Desktop Defender 2010</strong> is malware dolled up to resemble a pretty nice-looking legitimate security program. Which makes me wonder, considering the effort that goes into designing these rogues, why not go a step a further and make a real antispyware program? But I don’t pretend to understand these malware crazies. 

All the usual tactics are here: It sneaks in through a Trojan, and Desktop Defender 2010 pop-ups perform phony system scans saying your computer is infected with made up viruses like “Keygen-Nero.a” or “Genericdx!ae0965a7157c.” Then, it asks for money to activate the full version, which never comes. 

Before this malware makes you set fire to your computer, let me show you how to remove Desktop Defender 2010 from your hard drive, for free. ]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-desktop-defender-2010/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Volcano Security Suite</title>
		<link>http://www.411-spyware.com/remove-volcano-security-suite</link>
		<comments>http://www.411-spyware.com/remove-volcano-security-suite#comments</comments>
		<pubDate>Tue, 27 Oct 2009 21:47:40 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[asp2009.exe]]></category>
		<category><![CDATA[Volcano Security Suite]]></category>
		<category><![CDATA[VS83b.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5560</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/Volcano-Security-Suite.gif" title="Volcano Security Suite screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/Volcano-Security-Suite.gif" class="alignleft" alt="Volcano Security Suite screenshot" /></a> <strong>Volcano Security Suite </strong>is an updated version of the older malware programs <a href="../remove-windows-enterprise-defender">Windows Enterprise Defender</a> and <a href="../virus-melt-removal">Virus Melt</a>. It looks almost exactly the same, and its tactics are nothing new, so no surprises here. You’d think with that name, there’d at least be explosive lava flows or something, but no. Just the same old stuff.

It enters through ill-advised downloads and takes your computer hostage with Volcano Security Suite pop-ups, fake security scans, and scare tactics designed to mislead you into paying for a full version. It’ll distribute a bunch of little files throughout your computer, but they don’t do anything, and they’re easy to remove.

Ready to plug up this program’s puny eruptions? I’ll show you how to remove Volcano Security Suite, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-volcano-security-suite/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>ShieldSafeness</title>
		<link>http://www.411-spyware.com/remove-shieldsafeness</link>
		<comments>http://www.411-spyware.com/remove-shieldsafeness#comments</comments>
		<pubDate>Sun, 25 Oct 2009 19:29:40 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[2z075t59j48c.exe]]></category>
		<category><![CDATA[Shield Safeness]]></category>
		<category><![CDATA[ShieldSafeness]]></category>
		<category><![CDATA[ShieldSafeness.exe]]></category>
		<category><![CDATA[unp4.tmp.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5556</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/ShieldSafeness.gif" title="ShieldSafeness screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/ShieldSafeness.gif" class="alignleft" alt="ShieldSafeness screenshot" /></a> <strong>ShieldSafeness</strong> is the latest fake antispyware from the crew who gave us <a href="../remove-softstronghold">SoftStronghold</a>, <a href="../remove-softcop">SoftCop</a>, <a href="../remove-softsoldier">SoftSoldier</a>, and about 30 others, all exactly the same. This new release continues this malware’s recent trend of increasingly awkward names. Seriously, “ShieldSafeness” is the best they can come up with? Must be getting desperate.

Shield Safeness sneaks into your hard drive through fake codec updates and runs every time you start your computer. It uses ShieldSafeness pop-ups with phony system scans to scare you into thinking your computer is infected. Then, once it’s convinced you the danger is real, it starts asking for money for full protection.

Not interested in shelling out cash to crooks for imaginary software? I’ll show you how to remove ShieldSafeness from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-shieldsafeness/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>SoftStronghold</title>
		<link>http://www.411-spyware.com/remove-softstronghold</link>
		<comments>http://www.411-spyware.com/remove-softstronghold#comments</comments>
		<pubDate>Fri, 23 Oct 2009 21:57:00 +0000</pubDate>
		<dc:creator>Anne</dc:creator>
				<category><![CDATA[Fake Antispyware]]></category>
		<category><![CDATA[10246h9zktool4d5.exe]]></category>
		<category><![CDATA[205z0sp95ad.exe]]></category>
		<category><![CDATA[akx4.tmp.exe]]></category>
		<category><![CDATA[SoftStronghold]]></category>
		<category><![CDATA[SoftStronghold.exe]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5551</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/2009/10/SoftStronghold.gif" title="SoftStronghold screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/2009/10/SoftStronghold.gif" class="alignleft" alt="SoftStronghold screenshot" /></a> <strong>SoftStronghold </strong>is another variation of the same fake antispyware program we’ve been dealing with for months under names like <a href="../remove-softveteran">SoftVeteran</a>, <a href="../remove-softcop">SoftCop</a>, <a href="../remove-softsoldier">SoftSoldier</a>, and about 30 others. This latest name, “Soft Stronghold,” doesn’t exactly roll off the tongue, but these people are clearly running out of word combinations, so we’ll cut them some slack this time.

SoftStronghold is downloaded as a Trojan, then sets up shop on your hard drive. In addition to messing with your registry and security software, it will also spam you continuously with SoftStronghold pop-ups showing fake system scans designed to scare you into paying for a nonexistent full version.

Is this malware turning your computer time into a painful slog? I’ll show you how to remove SoftStronghold from your computer, for free.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-softstronghold/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
