“Notification from Chase Bank” email

November 15th, 2008, by Chris, at 411 Spyware | Posted in Phishing Email

“Notification from Chase Bank” email Threat Level: “Notification from Chase Bank” email is a threat

“Notification from Chase Bank” email screenshot “Notification from Chase Bank” email is a classic phishing email. “Notification from Chase Bank” email tells you your Chase account needs to be restored, and links to a scam webpage that tries to trick you into giving con artists your Chase login info.

If you accidentally log into the site “Notification from Chase Bank” email links to, you’ll give con artists access to your bank account and a chance to steal your personal identity. If you’ve logged into any sites that “Notification from Chase Bank” email links to, alert your bank and credit card companies. You might need to close your accounts.

Whenever you see an email like “Notification from Chase Bank” email, never click any links. If you’re concerned the email might be real, type your bank’s website address into a fresh browser window, and login from there.

Let me show you how to block “Notification from Chase Bank” email.

Read more about “Notification from Chase Bank” email »




Spyware Secure

November 15th, 2008, by Chris, at 411 Spyware | Posted in Rogue Anti Spyware, SpywareSecure, Trojans

Spyware Secure Threat Level: Spyware Secure is an annoyance

Spyware Secure screenshot Spyware Secure is a fake anti-spyware program. Like other rogue antispyware, Spyware Secure teases you with a false security alert popping up from your system tray. When you click this Spyware Secure alert, you’re taken to Spyware Secure’s site.

At Spyware Secure’s site, Spyware Secure might silently download itself onto your computer. It gets even better, folks: Spyware Secure launches with your PC, and may launch tons of popup ads.

You want more?

Spyware Secure may also auto-update itself, making it tough to manually remove.

Let me show you how to remove Spyware Secure for free.

Read more about Spyware Secure »




W32.Spybot.Worm

November 14th, 2008, by Chris, at 411 Spyware | Posted in Worms

W32.Spybot.Worm Threat Level: W32.Spybot.Worm is a danger

W32.Spybot.Worm is a family of worms that spread through file-sharing network Kazaa and mIRC.

Once you’re infected, W32.Spybot.Worm connects to an IRC server, joins a channel, and waits for instructions from a hacker.

Unless identity theft, hacker botnets, and W32.Spybot.Worm popups sound like a fun weekend, remove W32.Spybot.Worm.

I’ll show you how to get rid of W32.Spybot.Worm for free.

Read more about W32.Spybot.Worm »




AllInOne-Scanner.com

November 14th, 2008, by Chris, at 411 Spyware | Posted in Rogue Anti Spyware

AllInOne-Scanner.com Threat Level: AllInOne-Scanner.com is a pest

AllInOne-Scanner.com screenshotAllInOne-Scanner.com is home to fake anti-spyware Antivirus 2009 Protection. AllInOne-Scanner.com offers a free scan with Antivirus 2009 Protection.

What a deal.

Only if you download the trial, Antivirus 2009 Protection tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying Antivirus 2009 Protection for $49.95-$79.95.

Despite whatever AllInOne-Scanner.com says, if you don’t remember how you got to AllInOne-Scanner.com, the only spyware you’re infected with is Antivirus 2009 Protection. So just remove Antivirus 2009 Protection, before you throw your PC out the window.

Read more about AllInOne-Scanner.com »




SysHomepage.com/security/xp

November 14th, 2008, by Chris, at 411 Spyware | Posted in Browser Hijackers, Rogue Anti Spyware

SysHomepage.com/security/xp Threat Level: SysHomepage.com/security/xp is a pest

SysHomepage.com/security/xp screenshot SysHomepage.com/security/xp is a fake anti-spyware browser hijacker. You could be browsing the web, and out of nowhere a SysHomepage.com/security/xp popup appears:

The page at http://www.SysHomepage.com/security/xp says:
Warning!
W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords
and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files.
Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

If you click “OK,” Windows Antivirus 2008 (AKA: Win Antivirus 2008) will be downloaded. Clicking “Cancel” moves you on a page promoting Windows Antivirus 2008 and Ultimate Antivirus.

If your computer keeps going to SysHomepage.com/security/xp, we’ll show you how to block SysHomepage.com/security/xp for free.

Read more about SysHomepage.com/security/xp »




Antivirus2009Protection

November 13th, 2008, by Chris, at 411 Spyware | Posted in Rogue Anti Spyware

Antivirus2009Protection Threat Level: Antivirus2009Protection is a pest

Antivirus2009Protection — AKA Antivirus 2009 Protection — is more fake anti-spyware software.

You can thank a Trojan like Zlob or a rogue site for installing Antivirus2009Protection onto your PC. Once Antivirus2009Protection is in, Antivirus2009Protection tries to trick you into buying the “full” version of Antivirus2009Protection with fake security warnings.

Before you take a golf club to your computer to kill Antivirus2009Protection popups, I’ll show you how to get rid of Antivirus2009Protection for free.

Read more about Antivirus2009Protection »




Winvestigator

November 13th, 2008, by Chris, at 411 Spyware | Posted in Keyloggers

Winvestigator Threat Level: Winvestigator is a threat

Winvestigator is a commercial keylogger that tracks your emails, chats, instant messages, and every keystroke you type. Winvestigator might have been installed for legit reasons — like monitoring kids’ Internet safety — but Winvestigator may be stealing your username and passwords, spying on your online conversations, watching which websites you visit, seeing what applications you launch, and more. Winvestigator might be a serious violation of your security and privacy, putting your financial and personal data at risk.

I suggest removing Winvestigator immediately, then dumping whoever installed Winvestigator onto your PC.

Read more about Winvestigator »




AV-AntiVir-Scanner-3.net

November 13th, 2008, by Chris, at 411 Spyware | Posted in Browser Hijackers, Rogue Anti Spyware

AV-AntiVir-Scanner-3.net Threat Level: AV-AntiVir-Scanner-3.net is a pest

AV-AntiVir-Scanner-3.net screenshotAV-AntiVir-Scanner-3.net is the latest browser hijacker that changes your home page to AV-AntiVir-Scanner-3.net. Like its lookalike, FullScanner.com, AV-AntiVir-Scanner-3.net promotes fake anti-spyware, like Antivirus Scanner and Web Spy Shield. AV-AntiVir-Scanner-3.net runs its own fake security scan and popup, telling you you’re infected with spyware. This AV-AntiVir-Scanner-3.net popup reads:

http://AV-AntiVir-Scanner-3.net says:
“Online Scanner is checking your system for spyware and privacy threats. Some security vulnerabilities are found. To keep your computer spyware protected, please click “RUN” or “OPEN” when asked to start the installation of full Antivirus Scanner version.
This file has been digitally signed and independently certified as 100% free of viruses, adware and spyware.”

And

http://AV-AntiVir-Scanner-3.net says:
“NOTICE: If your computer has been running slower than normal, it may be infected with Viruses, Adware or Spyware.
Antivirus Scanner will perform completely FREE scan of your system for malicious programs.
Download Antivirus Scanner for FREE now!”

The only “Viruses, Adware or Spyware” you’re infected with is Antivirus Scanner and AV-AntiVir-Scanner-3.net. And the only thing AV-AntiVir-Scanner-3.net and its fake anti-spyware removes is money from your pockets.

So let’s get rid of AV-AntiVir-Scanner-3.net.

Read more about AV-AntiVir-Scanner-3.net »




Konov Cell Phone Trojan

November 13th, 2008, by Chris, at 411 Spyware | Posted in Trojans

Konov Cell Phone Trojan Threat Level: Konov Cell Phone Trojan is a danger

Konov Cell Phone Trojan is a cell phone Trojan that Konov Cell Phone Trojan sends text messages to premium services; Konov Cell Phone Trojan’s goal is to milk your phone plan.

Konov Cell Phone Trojan sneaks onto your phone through Bluetooth or syncing with an infected PC. Konov Cell Phone Trojan can infect any phone that uses J2ME (Java 2 Micro Edition).

If you see that your phone has sent text messages “#maybox 2402″ or “era 2402,” you probably have Konov Cell Phone Trojan.

Unless a billion-dollar phone bill sounds fun, I’ll show you how to block Konov Cell Phone Trojan for free.

Read more about Konov Cell Phone Trojan »




Antispyware PRO XP

November 13th, 2008, by Chris, at 411 Spyware | Posted in Rogue Anti Spyware

Antispyware PRO XP Threat Level: Antispyware PRO XP is a pest

Antispyware PRO XP screenshot Antispyware PRO XP — AKA Antispyware Pro XP — is more fake anti-spyware software.

Like other scam anti-spyware, you can thank a Trojan disguised as a video codec or a rogue website for installing Antispyware PRO XP onto your PC. Once Antispyware PRO XP is in, Antispyware PRO XP tries to trick you into buying the “full” version of Antispyware PRO XP with fake security warnings.

Before you take a baseball bat to your computer to kill Antispyware PRO XP popups, I’ll show you how to get rid of Antispyware PRO XP for free.

Read more about Antispyware PRO XP »