21 Jul 2008 | By Kristopher | Posted under Spyware | 1 Comment »

IE Antivirus 3.3 Threat Level: IE Antivirus 3.3 is a pest

IE Antivirus 3.3 screenshotIE Antivirus 3.3 is more fake anti-spyware, just a twin of Malware Bell. Maybe you downloaded IE Antivirus 3.3 from IEAntivirus.com, but more likely a Trojan like Zlob took the initiative of installing it on your system for you.

How considerate.

IE Antivirus 3.3 runs exaggerated “security” scans and pops up fake system alerts to try to trick you into buying IE Antivirus 3.3.

Unless you like getting ripped off, or enjoy a IE Antivirus 3.3 popup, uninstall IE Antivirus 3.3.

Keep reading »


16 Jul 2008 | By Kristopher | Posted under Spyware | No Comments »

IPExeWin.exe Threat Level: IPExeWin.exe is a pest

IPExeWin.exe screenshot IPExeWin.exe is a “threat” that appears on the websites and security scans of fake antispyware WinSpywareProtect.

And why is IPExeWin.exe dangerous? Only because IPExeWin.exe might scare you into wasting $49.95 on WinSpywareProtect.

Unless you like getting ripped off, don’t download the software the IPExeWin.exe popup links to. You’re not really infected with IPExeWin.exe — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of IPExeWin.exe for free.

Keep reading »


14 Jul 2008 | By Kristopher | Posted under Spyware | No Comments »

AudioPitUSR.exe Threat Level: AudioPitUSR.exe is a pest

AudioPitUSR.exe screenshot AudioPitUSR.exe is a “threat” that appears on the websites and security scans of fake antispyware WinSpywareProtect.

And why is AudioPitUSR.exe dangerous? Only because AudioPitUSR.exe might scare you into wasting $49.95 on WinSpywareProtect.

Unless you like getting ripped off, don’t download the software the AudioPitUSR.exe popup links to. You’re not really infected with AudioPitUSR.exe — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of AudioPitUSR.exe for free.

Keep reading »


07 Jul 2008 | By Kristopher | Posted under Fake Antispyware, Spyware | No Comments »

The Web Sentinel Threat Level: The Web Sentinel is a pest

The Web Sentinel, or TheWebSentinel, is just another fake anti-spyware application. Like other scam-ware, The Web Sentinel pops up fake security alerts to try and scare you into buying The Web Sentinel.

If The Web Sentinel is annoying you, the only security issue you have is The Web Sentinel.

I’ll show you how to get rid of The Web Sentinel for free.

Keep reading »


04 Jul 2008 | By Kristopher | Posted under Spyware | No Comments »

Virus-WebScanner.com Threat Level: Virus-WebScanner.com is a pest

Virus-WebScanner.com screenshotVirus-WebScanner.com is home to fake anti-spyware XP Antivirus Protection. Virus-WebScanner.com offers a free scan with XP Antivirus Protection.

What a deal.

Only if you download the trial, XP Antivirus Protection tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying XP Antivirus Protection for $49.95-$79.95. This Virus-WebScanner.com popup reads:

The page at http://www.Virus-WebScanner.com says:
ATTENTION! You have not completed the virus scan!
Your PC is still infected with spyware!
Please return to Virus-WebScanner.com and download XP antivirus scanner.”

Despite whatever Virus-WebScanner.com says, if you don’t remember how you got to Virus-WebScanner.com, the only spyware you’re infected with is XP Antivirus Protection. So just remove XP Antivirus Protection, before you throw your PC out the window.

Keep reading »


02 Jul 2008 | By Kristopher | Posted under Spyware | No Comments »

Gxvpsafm Toolbar Threat Level: Gxvpsafm Toolbar is a Pest

Gxvpsafm Toolbar Gxvpsafm Toolbar is the latest toolbar by everyone’s favorite Trojan, Zlob. Gxvpsafm Toolbar was created to scare you into buying fake anti-spyware. To scam you, Gxvpsafm Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Gxvpsafm Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its impossible-to-pronounce name makes it clear — Gxvpsafm Toolbar isn’t exactly about pleasing its customers.

If you have Gxvpsafm Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Gxvpsafm Toolbar. Unless you like wasting money, don’t buy Gxvpsafm Toolbar or the products it’s pimping.

Keep reading »


30 Jun 2008 | By Kristopher | Posted under Spyware | 1 Comment »

SafeBrowseNow.com/xp/ Threat Level: SafeBrowseNow.com/xp/ is a pest

SafeBrowseNow.com/xp/ screenshotSafeBrowseNow.com/xp/ is the latest browser hijacker that changes your home page to SafeBrowseNow.com/xp/. Like its twin DoBrowseSecure.com/xp, SafeBrowseNow.com/xp/ promotes fake anti-spyware, like Ultimate Antivirus 2008 and Windows Antivirus 2008. SafeBrowseNow.com/xp/ runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafeBrowseNow.com/xp/ popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafeBrowseNow.com/xp/. And the only thing SafeBrowseNow.com/xp/ and its fake anti-spyware removes is money from your pockets.

So get rid of SafeBrowseNow.com/xp/.

Keep reading »


30 Jun 2008 | By Kristopher | Posted under Fake Antispyware, Spyware | No Comments »

SpywareScanner2008 Threat Level: SpywareScanner2008 is a pest

SpywareScanner2008 is just more fake anti-spyware. SpywareScanner2008 may have been installed by a Trojan. SpywareScanner2008 might launch fake system alert popups, reading “Warning! Your system might be a risk.” This SpywareScanner2008 popup is supposed to scare you into wanting to buy SpywareScanner2008.

Don’t waste your money — don’t download the software the SpywareScanner2008 popup recommends.

I’ll show you how to get rid of SpywareScanner2008 for free.

Or you could always toss your PC out the window.

Keep reading »


24 Jun 2008 | By Kristopher | Posted under Spyware | 11 Comments »

AntiVirXP08 Threat Level: AntiVirXP08 is a pest

AntiVirXP08 is more fake anti-spyware. Just a mutation of other scam software, AntiVirXP08 pulls all the same tricks. AntiVirXP08 probably installed itself onto your PC with a Trojan, then AntiVirXP08 launches fake system alert popups. This AntiVirXP08 popup is supposed to scare you into buying AntiVirXP08.

Don’t waste your money — don’t download the software the AntiVirXP08 popup recommends.

I’ll show you how to get rid of AntiVirXP08 for free.

Or you can always throw your computer out the window.

Keep reading »


18 Jun 2008 | By Kristopher | Posted under Spyware | 1 Comment »

Repair Registry Pro Threat Level: Repair Registry Pro is a pest

Repair Registry ProRepair Registry Pro is more fake registry repair software.

You might have caught Repair Registry Pro from a Trojan. How do you know if you have Repair Registry Pro? More like how don’t you know: fake registry scans and a million Repair Registry Pro popups try to trick you into visiting www.RepairRegistryPro.com to buy the “licensed” version of Repair Registry Pro.

Repair Registry Pro? More like Destroy Registry Pro.

Send some hate email to support@RepairRegistryPro.com.

Keep reading »