Spyware Archive

Spyware: SpywareScanner2008

June 30th, 2008, by Kristopher | Posted in Rogue Anti Spyware, Spyware, SpywareScaner2008

SpywareScanner2008 Threat Level: SpywareScanner2008 is a pest

SpywareScanner2008 is just more fake anti-spyware. SpywareScanner2008 may have been installed by a Trojan. SpywareScanner2008 might launch fake system alert popups, reading “Warning! Your system might be a risk.” This SpywareScanner2008 popup is supposed to scare you into wanting to buy SpywareScanner2008.

Don’t waste your money — don’t download the software the SpywareScanner2008 popup recommends.

I’ll show you how to get rid of SpywareScanner2008 for free.

Or you could always toss your PC out the window.

Read more about SpywareScanner2008 »


Spyware: AntiVirXP08

June 24th, 2008, by Kristopher | Posted in Spyware

AntiVirXP08 Threat Level: AntiVirXP08 is a pest

AntiVirXP08 is more fake anti-spyware. Just a mutation of other scam software, AntiVirXP08 pulls all the same tricks. AntiVirXP08 probably installed itself onto your PC with a Trojan, then AntiVirXP08 launches fake system alert popups. This AntiVirXP08 popup is supposed to scare you into buying AntiVirXP08.

Don’t waste your money — don’t download the software the AntiVirXP08 popup recommends.

I’ll show you how to get rid of AntiVirXP08 for free.

Or you can always throw your computer out the window.

Read more about AntiVirXP08 »


Spyware: Repair Registry Pro

June 18th, 2008, by Kristopher | Posted in Spyware

Repair Registry Pro Threat Level: Repair Registry Pro is a pest

Repair Registry ProRepair Registry Pro is more fake registry repair software.

You might have caught Repair Registry Pro from a Trojan. How do you know if you have Repair Registry Pro? More like how don’t you know: fake registry scans and a million Repair Registry Pro popups try to trick you into visiting www.RepairRegistryPro.com to buy the “licensed” version of Repair Registry Pro.

Repair Registry Pro? More like Destroy Registry Pro.

Send some hate email to support@RepairRegistryPro.com.

Read more about Repair Registry Pro »


Spyware: Spyware.CreditCarder.y

June 4th, 2008, by Kristopher | Posted in Rogue Anti Spyware, Spyware

Spyware.CreditCarder.y Threat Level: Spyware.CreditCarder.y is a pest

Spyware.CreditCarder.y is a “threat” that appears on the websites and security scans of fake antispyware XP Antivirus Protection, AKA XP Antivirus 2008.

And why is Spyware.CreditCarder.y dangerous? Only because Spyware.CreditCarder.y might scare you into wasting $49.95 on XP Antivirus.

Unless you like getting ripped off, don’t download the software the Spyware.CreditCarder.y popup links to. You’re not really infected with Spyware.CreditCarder.y — you’re infected with scamware that you need to remove.

I’ll show you how to get rid of Spyware.CreditCarder.y and XP Antivirus 2008, for free.

Read more about Spyware.CreditCarder.y »


Spyware: Trojan Virantix

May 9th, 2008, by Kristopher | Posted in Rogue Anti Spyware, Spyware, Trojan Virantix C, Trojan.Virantix.C, Trojans

Trojan Virantix Threat Level: /

Trojan Virantix screenshot Trojan Virantix is a Trojan that disables your anti-virus software and infect your computer with more malware and spyware, usually by downloading a file from FreeRealityMpegs.com. Trojan Virantix will create a mutex — {393921-e939391-3919139-3d3a738-11} — to make sure it’s always running on your computer. Trojan Virantix may try to scare you into downloading rogue antispyware WinAntivirus with fake security alerts. This Trojan Virantix popup reads:

“Windows Security Alert
Warning! Potential Spyware Operation!
Your computer is making unauthorized copies of your system and Internet files. Run full scan now to prevent any unathorised access to your files! Click here to download spyware remover …
Your computer is infected!”

or

“Your computer is infected!
Windows has detected spyware infection
It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you.
Click here to protect your computer from spyware!”

Trojan Virantix then tries to connect to www.softcashier.com/members/link_____ to download fake antispyware.

Unless identity theft and popups sound like a fun weekend to you, remove Trojan Virantix.

Read more about Trojan Virantix »


Spyware: PC Police Gold

February 28th, 2008, by Kristopher | Posted in Keyloggers, PC PoliceGold, PCPolice Gold, PCPoliceGold, Spyware

PC Police Gold Threat Level: PC Police Gold is a threat

PC Police Gold is a commercial keylogger that captures copies of your emails, chats, instant messages, and keystrokes typed. PC Police Gold may have been installed for legitimate purposes — i.e., monitoring children’s Internet safety — but PC Police Gold may be catching your username and passwords for accounts, tracking your online conversations, watching which websites you visit, what files you download from peer-to-peer applications, seeing what applications you launch, and more. PC Police Gold may be a severe violation of your security and privacy, putting your financial and personal data at risk.

I suggest removing PC Police Gold immediately, and dumping whoever installed PC Police Gold onto your PC.

Read more about PC Police Gold »


Spyware: Fake Tax Refund

February 11th, 2008, by Kristopher | Posted in Spyware

aJust got this nice email today:

  From:  notice@irs.gov
  Subject:  Refund ID:  WBEKTQQLMY
  Date:  February 11, 2008 7:43:10 AM EST
  To:  undisclosed-recipients: ;
  Reply-To:  notice@irs.gov

After the last annual fiscal activity we have determined that you are eligible to receive a tax refund. Please submit the tax refund request and allow us 6-9 days in order to process it.

To access the form for our tax refund calulator [SIC], please copy/paste in your browser the link bellow:

http://www.hashita.co.il/index.htm

Even if this wasn’t an obvious phishing email — see the “undisclosed recipients,” catch that typo, note the link to a non-IRS page? — you should never click on one of these emails and give out your personal information.

If you really think you’ve received a real IRS email about a tax refund — hope is a four-letter word — type in the IRS’s official URL, find their phone number, and call them to check.

Read more about Fake Tax Refund »


Spyware: ProduKey

January 27th, 2008, by Kristopher | Posted in Produ Key, Spyware

ProduKey Threat Level: ProduKey is a threat
ProduKey screenshotProduKey is freeware that shows your product key and product ID for various software. ProduKey can be installed and used for legitimate reasons, but because ProduKey can collect the information on computers in your local network, ProduKey might also be misused to view information on remote computers.

You know, like you use your car to get to work, but also to do donuts in your neighbor’s lawn. Good vs. bad.

Read more about ProduKey »


Spyware: Covenant Eyes

January 24th, 2008, by Kristopher | Posted in CovenantEyes, Spyware

Covenant Eyes Threat Level: Covenant Eyes is a minor pest

Covenant Eyes is commercial spyware that tracks your web browsing activity. If Covenant Eyes is installed on your computer, you’ll see an icon in your system tray, along with a splash screen when you boot up Windows that informs you you’re being watched by Covenant Eyes. Covenant Eyes then emails your “accountability partner” your web browsing history. Covenant Eyes can be legitimately installed on a shared computer to watch a spouse or employee’s activities, but this one’s got a special religious twist: it’s really about keeping you away from porn.

I know. Covenant Eyes is rather unholy.

Though, in theory, you asked someone to install Covenant Eyes, I’d remove Covenant Eyes. Uninstall Covenant Eyes here.

Read more about Covenant Eyes »


Spyware: 3wPlayer

August 25th, 2007, by Kristopher | Posted in Play3w, Spyware, Trojans

3wPlayer Threat Level: 3wPlayer is a threat

3wPlayer screenshot3wPlayer may be a rogue media player that tells you it will play hot videos when it’ll really infect your computer with trojans and other malware. Some of the malware 3wPlayer installs on your PC may disable your anti-virus software. Get rid of 3wPlayer immediately, and save your computer by buying quality porn. DailyAppz.Play3w.com may be 3wPlayer’s official site.

Read more about 3wPlayer »