BlockProtector is the new malware from the people who gave us BlockKeeper, ShieldSafeness, and about 35 other very similar programs. And by “very similar,” I mean exactly the same. These people just keep slapping new names on this thing and sending it out. How long can they keep this up?
Like all the others, Block Protector sneaks onto your hard drive through trojans or fake codec updates. It runs whenever you start your computer, using BlockProtector pop-ups to display phony system scans and non-existent virus threats. The goal is to convince you your computer is in legitimate danger, and then to take your money and run.
Not impressed by this tired old scam? I’ll show you how to remove BlockProtector from your computer, for free.
ObamaStimulusProgram.com is a site dedicated to educating you on Obama’s stimulus plan and getting free government grants.
That, and scamming you out of $2.95 shipping and handling, plus a possible $89 per month.
When you land on ObamaStimulusProgram.com, you’ll see a slick home page encouraging you to take advantage of Obama’s stimulus plan, and get free government grants. Click through, and you’ll hit a high-pressure page asking you for personal details, such as your income and age. Once you give ObamaStimulusProgram.com that information, you’ll magically qualify for government grants. All you need to do is give ObamaStimulusProgram.com your credit card information, to cover shipping and handling costs.
But before you do so, you may want to check out ObamaStimulusProgram.com’s terms:
Upon submitting a request for a Grant Kit, a Member ID and Password are assigned to you and can be used to gain access to Lead Source Services Grant website. The initial shipping & handling charge of $3.95 includes the Lead Source Services Grant tool Kit as well as ten (10) days worth of access to the online directories and training. After 10 days, you will automatically be billed the $89.61 recurring monthly fee for the Lead Source Services Grant membership.
Did that make you nervous? Click your button’s back browser, and you get a ObamaStimulusProgram.com popup:
Are you sure you want to navigate away from this page? Please click ‘CANCEL’ now to stay and claim your special offer. Press OK to continue, or Cancel to stay on the current page.
Instead of clicking “OK” or “CANCEL,” click your browser window close — as usual, if you want to get information about a particular company’s or organization’s offers, type their official site into your browser instead of clicking through random emails.
Yes, we can — avoid scam websites.
StartedWebsite.com/security/xp/ Threat Level: 
StartedWebsite.com/security/xp/ is a fake anti-spyware browser hijacker. You could be browsing the web, and out of nowhere a StartedWebsite.com/security/xp/ popup appears:
“The page at http://www.StartedWebsite.com/security/xp/ says:
Warning!
W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords
and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files.
Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.
If you click “OK,” Windows Antivirus 2008 (AKA: Win Antivirus 2008) will be downloaded. Clicking “Cancel” moves you on a page promoting Windows Antivirus 2008 and Ultimate Antivirus.
If your computer keeps going to StartedWebsite.com/security/xp/, we’ll show you how to block StartedWebsite.com/security/xp/ for free.
MicroAntiVir2009.com Threat Level: 
MicroAntiVir2009.com is a rogue website that promotes fake antivirus software. Even though MicroAntiVir2009.com doesn’t seem to be sure which scam-ware it’s promoting — MicroAntiVir2009.com mentions three different fake antivirus names on its home page alone — MicroAntivirus 2009 is the only fake antivirus MicroAntiVir2009.com wants to infect your PC with.
MicroAntivirus 2009 has a bit of an identity crisis, too — instead of actually looking for viruses, it generates fake security alerts every minute to trick you into paying $34.95 -$99.95 for the “full” version. Given how messed up MicroAntiVir2009.com is, you’ll most likely be charged $99.95, no matter what option you choose.
If MicroAntivirus 2009 is an unwanted guest on your computer, we’ll show you how to remove MicroAntivirus 2009 and block MicroAntiVir2009.com for free.
Q. I Bought a Legitimate Antivirus, But It Won’t Remove the Infection Threat Level: 
Q. I’m infected with a stubborn worm/virus/fake antispyware program. I bought Legitimate Antivirus/Anti-Spyware XYZ and it’s not solving the problem. A little help please!
I often see this asked in comments on 411-Spyware. I’m glad people come to us for for help, but there’s someone else they should be asking first — their antivirus/anti-spyware software support team.
If you paid for the software and it’s not removing the infection, it’s not doing its job. Free customer support should have been part of the package when you bought it, so find the software company’s email address and/or phone number and tell them of your problem. Antivirus/anti-spyware companies want you to renew your license when it expires, so they should be more than happy to help you remove the infection.
Please note that products like AVG Free and Spyware Doctor Starter Edition don’t have customer support. That’s the price you pay for not paying in the first place.
While you’re waiting for a reply from the antivirus/anti-spyware company’s support team, make sure your software is up to date, and run the program again. If the infection is getting in the way of you doing this, reboot your computer and hold down the F8 key. When the option appears, choose “Safe mode with Networking.” Once you’re in safe mode, update and scan from there if the software lets you.
Good luck!
Trojan-IM.Win32.Faker.a Threat Level: 
Trojan-IM.Win32.Faker.a is a real Trojan and a fake threat that appears in popups and desktop warnings by fake antispyware and rogue sites.
Is Trojan-IM.Win32.Faker.a dangerous? Trojan-IM.Win32.Faker.a was a serious threat, once upon a time — Trojan-IM.Win32.Faker.a would steal MSN Messenger passwords by generating a fake MSN Messenger “enter password” screen. Now, Trojan-IM.Win32.Faker.a’s biggest danger is scaring you into wasting money on fake anti-spyware like Internet Antivirus, by using tricks such as changing your screensaver and desktop to tell you that your computer is infected with spyware.
You’re probably not really infected with Trojan-IM.Win32.Faker.a — you’re infected with scamware that you need to remove.
I’ll show you how to get rid of Trojan-IM.Win32.Faker.a for free.
A-VXP08.net Threat Level: 
A-VXP08.net is home to Antivirus XP 2008, yet another fake anti-spyware application.
A-VXP08.net says Antivirus XP 2008 is “ultramodern software.” I’m not sure how they define “ultramodern software,” but all you’ll get from Antivirus XP 2008 are false positives and fake security popups telling you to buy the non-existent “full” version.
If you’re sick of A-VXP08.net’s “ultramodern” scamware, I’ll show you how to remove Antivirus XP 2008 for free.
SecureClick1.com Threat Level: 
SecureClick1.com is home to Antivirus 2009 Protect, AKA Antivirus 2009, one of many fake anti-spyware applications.
SecureClick1.com states that Antivirus 2009 Protection comes with a money-back guarantee. Don’t be fooled by this. After the scammers have your money, you will never hear from them again and SecureClick1.com will continue to give you false positives and fake security popups telling you to buy the non-existent “full” version.
If you don’t remember how you got to SecureClick1.com, don’t believe SecureClick1.com’s scare tactics — you’re probably just infected with Antivirus 2009.
I’ll show you how to block SecureClick1.com and remove Antivirus2009 for free.
Q. I bought fake antispyware. How do I get my money back? Threat Level: 
“Q. I bought Rogue Program X and now I can’t find any way of accessing this program. All the links that they gave me to click on just brings up a blank screen. I’ve even tried to find their support site and my computer tells me that there is no such site. I have contacted Rogue Program X for a refund but I have not heard back from them.
It’s tragic reading comments like these on 411-Spyware.com, because every person who pays for a fake antivirus or rogue anti-spyware program gives the makers more incentive to make more scam-ware. Fake antispyware is a scam, and there’s no full version of a fake antivirus, despite what all the pop ups you get hammered with say. All you’re doing is giving the scammers your money, and I’m sad to day there is very little chance you’ll get your money back.
Unfortunately these scams are run from foreign countries where the law is lax, so it’s unlikely that your countries law can help you.
The one action you can and must take as soon as possible is contacting your credit card company and bank to prevent the scammers from using your credit card for other purchases.
Scanner.Microantivirus-2009.com Threat Level: 
Scanner.Microantivirus-2009.com is a website promoting Micro Antivirus 2009, a fake anti-spyware application.
At the time of writing, the FireFox web browser is showing a warning that Scanner.Microantivirus-2009.com is an “Attack Site” and even if you ignore that, the website itself is not working. The scammers could change Scanner.Microantivirus-2009.com so that Micro Antivirus automatically downloads onto your PC. Because of this it’s best to block Scanner.Microantivirus-2009.com
If you’ve been infected with Micro Antivirus 2009, either from Scanner.Microantivirus-2009.com or elsewhere, we’ll show you how to remove Micro Antivirus 2009 for free.

Traduzca al Español
Übersetzen Sie zum Deutsch
Traduisez au Français
Traduca ad Italiano
Vertaal aan het Nederlands
Μεταφράστε στα ελληνικά
Översätta till Svensk
ترجمة الى العربية
中文翻译
한국어에게 번역하십시오
日本語に翻訳しなさい
Traduza ao Português
Переведите к русскому