21 Oct 2009 | By Anne | Posted under Fake Antispyware | 2 Comments »

SoftVeteran screenshot Introducing SoftVeteran, the latest malware release from the people who brought us SoftSoldier, TrustFighter, TrustCop, and about 25 other programs using the exact same design. Gee thanks, guys. We really needed another one of these.

Like all the others, Soft Veteran enters your computer as a Trojan, blocks your security programs, drags your system, and displays SoftVeteran pop-ups showing fake system scans. After it scares you into thinking your computer is infected, it shows you a payment screen and asks you to fork over money for full protection. Since there is no full protection, this is a scam.

Tired of these persistent little pests clogging up your hard drive? I’ll show you how to remove SoftVeteran from your computer, for free.

Keep reading »


21 Oct 2009 | By Anne | Posted under Fake Antispyware | No Comments »

Windows System Defender screenshot Windows System Defender, from the people who brought us Windows PC Defender and Windows Protection Suite, uses the image of a perfectly nice-looking young woman to earn your trust. Interesting tactic, but the friendly face is a woefully innacurate portrayal of what this faux-program can do.

After taking root in your PC, this malware shows Windows System Defender pop-ups that perform fake system scans and urge you to pay money for the full version of the program. Of course, the scans are fake, and while they’ll gladly take your money, they have no full version to deliver.

This program puts up a friendly front, but its insides are disappointingly rotten. Let me show you how to remove Windows System Defender from your computer, for free.

Keep reading »


21 Oct 2009 | By Kristopher | Posted under Fake Antispyware | 1 Comment »

<?php the_title(); ?> screenshot If you’ve received an email with the subject “Conflicker.B Infection Alert,” you’ve been targeted by a malware company trying to get a free ride on Microsoft’s good name. The email looks like this:

Dear Microsoft Customer,

Starting 18/10/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.

To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

It actually sounds kind of real, but when you look more closely, it’s all lies. Even if Microsoft had access to your email address, they wouldn’t send something like this. That’s what Windows’s Automatic Update system is for.

If you make the mistake of installing the attached install.zip file, you’ll end up with the malware infection Antivirus Pro 2010, which we covered last month. The program hijacks your browser, subverts your security software, and displays this phony warning message:

Your computer is infected!
Windows has detected spyware infection!

It is recomended to use special antispyware tools to pervent data loss.Windows will now download and install the most up-to-date antispyware for you.

Click here to protect your computer from spyware!

Has the Conflicker.B Spam Trojan turned your computer into a twisted, irritating version of its former self? Let me show you how to remove this infection, for free.

Keep reading »


20 Oct 2009 | By Kristopher | Posted under Fake Antispyware | 24 Comments »

Internet Antivirus Pro screenshot Internet Antivirus Pro, AKA InternetAntivirusPro, is more fake anti-spyware; Internet Antivirus Pro is just Internet Antivirus by another name. Like other scamware, Internet Antivirus Pro runs exaggerated security scans and pops up fake warnings to trick you into buying Internet Antivirus Pro for $49.95. Internet Antivirus Pro may have installed itself onto your PC through a Trojan, like Zlob, or through a website like Internet-Antivirus.com

Before Internet Antivirus Pro popups make you throw your PC out the window, I’ll show you how to get rid of Internet Antivirus Pro for free.

Keep reading »


19 Oct 2009 | By Anne | Posted under Fake Antispyware | No Comments »

SoftCop screenshot SoftCop, from the makers of SoftSoldier, SafeFighter, and TrustCop, is one of the few malware releases whose name is actually accurate. If someone’s breaking into your house, are you going to call the Soft Cop? Probably not. If you did, he’d probably show up and do something crazy—like release the criminal and try to rob you himself.

Which is exactly what this SoftCop does. It enters your computer and pretends to offer real protection. It’s incapable of detecting malware on your computer, but the SoftCop pop-ups will make up phony threats to scare you into paying for security it can’t deliver.

Sick of this police impersonator running rampant on your hard drive? I’ll show you how to remove SoftCop from your computer, for free.

Keep reading »


17 Oct 2009 | By Anne | Posted under Fake Antispyware | No Comments »

TRE AntiVirus screenshot With TRE AntiVirus, the badware whizzes who brought us SoftSoldier, TrustFighter, and about 25 other identical malware releases have finally changed looks. Instead of their trusty old blue-and-white design, they’ve switched to a mournful black and gray. Can we expect to see this new design over and over (and over and over) again? I’ll be waiting with bated breath.

In the meantime, here’s how it works. TRE AntiVirus sneaks into your computer and maliciously reconfigures your Registry. Then, TRE AntiVirus pop-ups show fake system scans saying “Infections Detected: 705.” Finally, once it has convinced you your computer’s infected, it request real money for an imaginary full version.

Sick of dealing with stubborn spyware that won’t leave? let me show you how to remove TRE AntiVirus from your computer, for free.

Keep reading »


15 Oct 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

<?php the_title(); ?> screenshot Internet security is serious business, so it’s nice when a completely inept spyware program like PC Scout comes along to provide a little comic relief. One of my favorite things about poorly made malware is all the little grammatically awkward lines they come up with to try to scare you into paying for their nonexistent full versions. PC Scout offers these gems:

“Most of the viruses and worms on your PC because of visiting pornosites or warez/torrent sites.”

“There were found 1 dangerous viruses on your computer. It is strongly recommended to remove them ASAP.”

“No, continue unprotected (Dangerous)
Allow Rootkit.Win32.Agent.pp to destroy your system now.”

And then there’s this one, which would be fine if it weren’t a complete lie:

“Internet Explorer is infected with worm Rootkit.Win32.Agent.pp.”

This is how PC Scout gets you. It sneaks onto your hard drive, runs every time you start your computer, and displays these phony system scans designed to scare you into forking over money for a full version that they can’t deliver. The scan is fake, and the threats are made up.

Want to save your money for real spyware programs that aren’t unintentionally hilarious? I’ll show you how to remove PC Scout from your computer, for free.

Keep reading »


15 Oct 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

SoftSoldier screenshot SoftSoldier is the newest recruit from the malware bootcamp that produced TrustSoldier, SaveSoldier, and SecuritySoldier. We’ve still seen no sign of SafeSoldier, SecureSoldier, SystemSoldier, QuickSoldier, BlockSoldier, or DefenseSoldier, so don’t take off your flak jacket just yet. They could be waiting in ambush around the next curve.

Like its badware brothers-in-arms, Soft Soldier breaches weak spots in your defenses and attempts to defeat your computer from within. If the SoftSoldier pop-ups and browser spam don’t get you, its demands for money might wear you down. But don’t give in; your money will only bring a heavier spam bombardment.

Okay, since the soldier metaphor is getting a little tiresome, ready to ditch this program? I’ll show you how to remove SoftSoldier from your computer, for free.

Keep reading »


14 Oct 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

<?php the_title(); ?> screenshotActive Security has all the common characteristics of fake antispyware programs: a professional but bland design, a forgettable name, an uninspiring catch phrase (“Help protect your computer”), a standard system scan interface, and an over-the-top fake registration button. Take a good look at the attached image, because you may never see a more perfectly unremarkable malware application than this.

Active Security gets into your computer and drags your CPU with spam and Active Security pop-ups showing fake system scans. The goal is to scare you with made-up threats and then take your money for the so-called “full version,” which doesn’t exist.

Tired of being bored to death by mind-numbingly dull spyware programs? I’ll show you how to remove Active Security from your computer, for free.

Keep reading »


12 Oct 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

<?php the_title(); ?> screenshotMeet TrustFighter, the latest scareware spawn to crawl from the malware goo that gave us TrustCop and SecureVeteran. These things are practically clones of each other, using the same blue-and-white design and the same old scare tactics. Frankly, I find these persistent little pests a bit creepy, but at least they’re easy to squish.

Like the 20-something others, Trust Fighter sneaks into your computer, nests in your hard drive, and spams you with TrustFighter pop-ups showing fake system scans. And just when you think you’ve got vga775.f, or whatever second-hand virus names they’re using this time, they pester you to pay for a non-existent license.

Sick of being menaced by mindless spyware vermin? I’ll show you how to remove TrustFighter from your computer, for free.

Keep reading »