Desktop Defender 2010 is malware dolled up to resemble a pretty nice-looking legitimate security program. Which makes me wonder, considering the effort that goes into designing these rogues, why not go a step a further and make a real antispyware program? But I don’t pretend to understand these malware crazies.

All the usual tactics are here: It sneaks in through a Trojan, and Desktop Defender 2010 pop-ups perform phony system scans saying your computer is infected with made up viruses like “Keygen-Nero.a” or “Genericdx!ae0965a7157c.” Then, it asks for money to activate the full version, which never comes.

Before this malware makes you set fire to your computer, let me show you how to remove Desktop Defender 2010 from your hard drive, for free.

Keep reading »

Volcano Security Suite is an updated version of the older malware programs Windows Enterprise Defender and Virus Melt. It looks almost exactly the same, and its tactics are nothing new, so no surprises here. You’d think with that name, there’d at least be explosive lava flows or something, but no. Just the same old stuff.

It enters through ill-advised downloads and takes your computer hostage with Volcano Security Suite pop-ups, fake security scans, and scare tactics designed to mislead you into paying for a full version. It’ll distribute a bunch of little files throughout your computer, but they don’t do anything, and they’re easy to remove.

Ready to plug up this program’s puny eruptions? I’ll show you how to remove Volcano Security Suite, for free.

Keep reading »

ShieldSafeness is the latest fake antispyware from the crew who gave us SoftStronghold, SoftCop, SoftSoldier, and about 30 others, all exactly the same. This new release continues this malware’s recent trend of increasingly awkward names. Seriously, “ShieldSafeness” is the best they can come up with? Must be getting desperate.

Shield Safeness sneaks into your hard drive through fake codec updates and runs every time you start your computer. It uses ShieldSafeness pop-ups with phony system scans to scare you into thinking your computer is infected. Then, once it’s convinced you the danger is real, it starts asking for money for full protection.

Not interested in shelling out cash to crooks for imaginary software? I’ll show you how to remove ShieldSafeness from your computer, for free.

Keep reading »

SoftStronghold is another variation of the same fake antispyware program we’ve been dealing with for months under names like SoftVeteran, SoftCop, SoftSoldier, and about 30 others. This latest name, “Soft Stronghold,” doesn’t exactly roll off the tongue, but these people are clearly running out of word combinations, so we’ll cut them some slack this time.

SoftStronghold is downloaded as a Trojan, then sets up shop on your hard drive. In addition to messing with your registry and security software, it will also spam you continuously with SoftStronghold pop-ups showing fake system scans designed to scare you into paying for a nonexistent full version.

Is this malware turning your computer time into a painful slog? I’ll show you how to remove SoftStronghold from your computer, for free.

Keep reading »

Introducing SoftVeteran, the latest malware release from the people who brought us SoftSoldier, TrustFighter, TrustCop, and about 25 other programs using the exact same design. Gee thanks, guys. We really needed another one of these.

Like all the others, Soft Veteran enters your computer as a Trojan, blocks your security programs, drags your system, and displays SoftVeteran pop-ups showing fake system scans. After it scares you into thinking your computer is infected, it shows you a payment screen and asks you to fork over money for full protection. Since there is no full protection, this is a scam.

Tired of these persistent little pests clogging up your hard drive? I’ll show you how to remove SoftVeteran from your computer, for free.

Keep reading »

Windows System Defender, from the people who brought us Windows PC Defender and Windows Protection Suite, uses the image of a perfectly nice-looking young woman to earn your trust. Interesting tactic, but the friendly face is a woefully innacurate portrayal of what this faux-program can do.

After taking root in your PC, this malware shows Windows System Defender pop-ups that perform fake system scans and urge you to pay money for the full version of the program. Of course, the scans are fake, and while they’ll gladly take your money, they have no full version to deliver.

This program puts up a friendly front, but its insides are disappointingly rotten. Let me show you how to remove Windows System Defender from your computer, for free.

Keep reading »

If you’ve received an email with the subject “Conflicker.B Infection Alert,” you’ve been targeted by a malware company trying to get a free ride on Microsoft’s good name. The email looks like this:

Dear Microsoft Customer,

Starting 18/10/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.

To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

It actually sounds kind of real, but when you look more closely, it’s all lies. Even if Microsoft had access to your email address, they wouldn’t send something like this. That’s what Windows’s Automatic Update system is for.

If you make the mistake of installing the attached install.zip file, you’ll end up with the malware infection Antivirus Pro 2010, which we covered last month. The program hijacks your browser, subverts your security software, and displays this phony warning message:

Your computer is infected!
Windows has detected spyware infection!

It is recomended to use special antispyware tools to pervent data loss.Windows will now download and install the most up-to-date antispyware for you.

Click here to protect your computer from spyware!

Has the Conflicker.B Spam Trojan turned your computer into a twisted, irritating version of its former self? Let me show you how to remove this infection, for free.

Keep reading »

Internet Antivirus Pro, AKA InternetAntivirusPro, is more fake anti-spyware; Internet Antivirus Pro is just Internet Antivirus by another name. Like other scamware, Internet Antivirus Pro runs exaggerated security scans and pops up fake warnings to trick you into buying Internet Antivirus Pro for $49.95. Internet Antivirus Pro may have installed itself onto your PC through a Trojan, like Zlob, or through a website like Internet-Antivirus.com

Before Internet Antivirus Pro popups make you throw your PC out the window, I’ll show you how to get rid of Internet Antivirus Pro for free.

Keep reading »

SoftCop, from the makers of SoftSoldier, SafeFighter, and TrustCop, is one of the few malware releases whose name is actually accurate. If someone’s breaking into your house, are you going to call the Soft Cop? Probably not. If you did, he’d probably show up and do something crazy—like release the criminal and try to rob you himself.

Which is exactly what this SoftCop does. It enters your computer and pretends to offer real protection. It’s incapable of detecting malware on your computer, but the SoftCop pop-ups will make up phony threats to scare you into paying for security it can’t deliver.

Sick of this police impersonator running rampant on your hard drive? I’ll show you how to remove SoftCop from your computer, for free.

Keep reading »

With TRE AntiVirus, the badware whizzes who brought us SoftSoldier, TrustFighter, and about 25 other identical malware releases have finally changed looks. Instead of their trusty old blue-and-white design, they’ve switched to a mournful black and gray. Can we expect to see this new design over and over (and over and over) again? I’ll be waiting with bated breath.

In the meantime, here’s how it works. TRE AntiVirus sneaks into your computer and maliciously reconfigures your Registry. Then, TRE AntiVirus pop-ups show fake system scans saying “Infections Detected: 705.” Finally, once it has convinced you your computer’s infected, it request real money for an imaginary full version.

Sick of dealing with stubborn spyware that won’t leave? let me show you how to remove TRE AntiVirus from your computer, for free.

Keep reading »