Spyware Archive

Spyware: XPert Antivirus

August 21st, 2008, by Chris, at 411 Spyware | Posted in Spyware

XPert Antivirus Threat Level: XPert Antivirus is a pest

XPert Antivirus screenshot XPert Antivirus, AKA XPertAntivirus or XPert Scam, is more fake anti-spyware. Just like other scamware, XPert Antivirus runs exaggerated security scans and pops up fake warnings to trick you into buying XPert Antivirus for $39.95-79.95. XPert Antivirus might have installed itself onto your PC through a Trojan, like Zlob, or through XPert Antivirus’s site, XPertAntivirus.com.

Before XPert Antivirus popups make you throw your PC into a bubble bath, I’ll show you how to get rid of XPert Antivirus for free.

Read more about XPert Antivirus »


Spyware: XP Antivirus 2008 V2.5

August 4th, 2008, by Chris, at 411 Spyware | Posted in Spyware

XP Antivirus 2008 V2.5 Threat Level: XP Antivirus 2008 V2.5 is a pest

XP Antivirus 2008 V2.5 screenshotXP Antivirus 2008 V2.5 is more fake anti-spyware, the latest mutation of XP Antivirus. XP Antivirus 2008 V2.5 pops up false security alerts to try and trick you into buying XP Antivirus 2008 V2.5. XP Antivirus 2008 V2.5 popups read:

“System alert!”
“Internal Conflict Alert!”
“71 viruses found!”

XP Antivirus 2008 V2.5 may have downloaded itself onto your computer through a Trojan, like Zlob. XP Antivirus 2008 V2.5 can launch when you start up Windows, and XP Antivirus 2008 V2.5 popups can be hard to get rid.

I’ll show you how to get rid of XP Antivirus 2008 V2.5 for free, before XP Antivirus 2008 V2.5 makes you throw your PC out the window.

Read more about XP Antivirus 2008 V2.5 »


Spyware: PC-Scanner-Online.com

July 21st, 2008, by Chris, at 411 Spyware | Posted in Spyware

PC-Scanner-Online.com Threat Level: PC-Scanner-Online.com is a pest

PC-Scanner-Online.com screenshotPC-Scanner-Online.com is home to Antivirus 2008, one of the latest fake anti-spyware applications. PC-Scanner-Online.com runs a simulated system scan online, then offers a free scan with Antivirus 2008. What a deal. Only if you download the trial, Antivirus 2008 gives false positives, and pops up fake security alerts to trick you into buying Antivirus 2008 for $49.95-$79.95. This PC-Scanner-Online.com popup reads:

“The page at http://PC-Scanner-Online.com says:
Attention! Your PC may not have virus protection system. This may lead to your PC being infected. Now your system will be scanned for security risks. Press OK to continue.”

Despite whatever PC-Scanner-Online.com says, if you don’t remember how you got to PC-Scanner-Online.com, the only spyware you’re infected with is Antivirus 2008. So just block PC-Scanner-Online.com.

Read more about PC-Scanner-Online.com »


Spyware: IE Antivirus 3.3

July 21st, 2008, by Chris, at 411 Spyware | Posted in Spyware

IE Antivirus 3.3 Threat Level: IE Antivirus 3.3 is a pest

IE Antivirus 3.3 screenshotIE Antivirus 3.3 is more fake anti-spyware, just a twin of Malware Bell. Maybe you downloaded IE Antivirus 3.3 from IEAntivirus.com, but more likely a Trojan like Zlob took the initiative of installing it on your system for you.

How considerate.

IE Antivirus 3.3 runs exaggerated “security” scans and pops up fake system alerts to try to trick you into buying IE Antivirus 3.3.

Unless you like getting ripped off, or enjoy a IE Antivirus 3.3 popup, uninstall IE Antivirus 3.3.

Read more about IE Antivirus 3.3 »


Spyware: IPExeWin.exe

July 16th, 2008, by Chris, at 411 Spyware | Posted in Spyware

IPExeWin.exe Threat Level: IPExeWin.exe is a pest

IPExeWin.exe screenshot IPExeWin.exe is a “threat” that appears on the websites and security scans of fake antispyware WinSpywareProtect.

And why is IPExeWin.exe dangerous? Only because IPExeWin.exe might scare you into wasting $49.95 on WinSpywareProtect.

Unless you like getting ripped off, don’t download the software the IPExeWin.exe popup links to. You’re not really infected with IPExeWin.exe — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of IPExeWin.exe for free.

Read more about IPExeWin.exe »


Spyware: AudioPitUSR.exe

July 14th, 2008, by Chris, at 411 Spyware | Posted in Spyware

AudioPitUSR.exe Threat Level: AudioPitUSR.exe is a pest

AudioPitUSR.exe screenshot AudioPitUSR.exe is a “threat” that appears on the websites and security scans of fake antispyware WinSpywareProtect.

And why is AudioPitUSR.exe dangerous? Only because AudioPitUSR.exe might scare you into wasting $49.95 on WinSpywareProtect.

Unless you like getting ripped off, don’t download the software the AudioPitUSR.exe popup links to. You’re not really infected with AudioPitUSR.exe — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of AudioPitUSR.exe for free.

Read more about AudioPitUSR.exe »


Spyware: The Web Sentinel

July 7th, 2008, by Chris, at 411 Spyware | Posted in Rogue Anti Spyware, Spyware

The Web Sentinel Threat Level: The Web Sentinel is a pest

The Web Sentinel, or TheWebSentinel, is just another fake anti-spyware application. Like other scam-ware, The Web Sentinel pops up fake security alerts to try and scare you into buying The Web Sentinel.

If The Web Sentinel is annoying you, the only security issue you have is The Web Sentinel.

I’ll show you how to get rid of The Web Sentinel for free.

Read more about The Web Sentinel »


Spyware: Virus-WebScanner.com

July 4th, 2008, by Chris, at 411 Spyware | Posted in Spyware

Virus-WebScanner.com Threat Level: Virus-WebScanner.com is a pest

Virus-WebScanner.com screenshotVirus-WebScanner.com is home to fake anti-spyware XP Antivirus Protection. Virus-WebScanner.com offers a free scan with XP Antivirus Protection.

What a deal.

Only if you download the trial, XP Antivirus Protection tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying XP Antivirus Protection for $49.95-$79.95. This Virus-WebScanner.com popup reads:

The page at http://www.Virus-WebScanner.com says:
ATTENTION! You have not completed the virus scan!
Your PC is still infected with spyware!
Please return to Virus-WebScanner.com and download XP antivirus scanner.”

Despite whatever Virus-WebScanner.com says, if you don’t remember how you got to Virus-WebScanner.com, the only spyware you’re infected with is XP Antivirus Protection. So just remove XP Antivirus Protection, before you throw your PC out the window.

Read more about Virus-WebScanner.com »


Spyware: Gxvpsafm Toolbar

July 2nd, 2008, by Chris, at 411 Spyware | Posted in Spyware

Gxvpsafm Toolbar Threat Level: Gxvpsafm Toolbar is a Pest

Gxvpsafm Toolbar Gxvpsafm Toolbar is the latest toolbar by everyone’s favorite Trojan, Zlob. Gxvpsafm Toolbar was created to scare you into buying fake anti-spyware. To scam you, Gxvpsafm Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Gxvpsafm Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its impossible-to-pronounce name makes it clear — Gxvpsafm Toolbar isn’t exactly about pleasing its customers.

If you have Gxvpsafm Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Gxvpsafm Toolbar. Unless you like wasting money, don’t buy Gxvpsafm Toolbar or the products it’s pimping.

Read more about Gxvpsafm Toolbar »


Spyware: SafeBrowseNow.com/xp/

June 30th, 2008, by Chris, at 411 Spyware | Posted in Spyware

SafeBrowseNow.com/xp/ Threat Level: SafeBrowseNow.com/xp/ is a pest

SafeBrowseNow.com/xp/ screenshotSafeBrowseNow.com/xp/ is the latest browser hijacker that changes your home page to SafeBrowseNow.com/xp/. Like its twin DoBrowseSecure.com/xp, SafeBrowseNow.com/xp/ promotes fake anti-spyware, like Ultimate Antivirus 2008 and Windows Antivirus 2008. SafeBrowseNow.com/xp/ runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafeBrowseNow.com/xp/ popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafeBrowseNow.com/xp/. And the only thing SafeBrowseNow.com/xp/ and its fake anti-spyware removes is money from your pockets.

So get rid of SafeBrowseNow.com/xp/.

Read more about SafeBrowseNow.com/xp/ »