AntiMalwareGuard Threat Level:

AntiMalwareGuard is just more fake anti-spyware. AntiMalwareGuard may have been installed by a Trojan. AntiMalwareGuard launches fake system alerts. This AntiMalwareGuard popup is supposed to scare you into buying the fake antispyware. It reads:

“It is highly recommended to get a full version of AntiMalwareGuard protection software in order to fix all malicious codes. Click here to start registration and have all the malware away from your PC thereafter.”

It is highly recommended unless you like getting ripped off, don’t download AntiMalwareGuard. If you already paid for this piece of crap, you can try AntiMalwareGuard.com’s refund policy. But if I had a choice between dealing with them and throwing my PC out the window, I think you know what I’d do.

Read more about AntiMalwareGuard »

DangerousVirus Threat Level:

DangerousVirus is a “virus” that appears in fake security alerts from rogue antispyware. DangerousVirus popups could read:

“Your computer was infected with DangerousVirus.
It’s dangerous for your system, some files can be lost and your browser can be slow!
Click OK to download the antispyware program to clean your computer! (Recommended)”

or

“Your browser was hijacked by DangerousVirus.”

This DangerousVirus popup is supposed to scare you into buying the fake antispyware. You may have caught “DangerousVirus” by a drive-by download, or getting tricked into downloading a fake video codec.

Unless you like getting ripped off, don’t download the software the DangerousVirus popup links to. You’re not really infected with DangerousVirus — you’re infected with fake anti-spyware that you need to remove.

Read more about DangerousVirus »

AntiMalwareShield Threat Level:

AntiMalwareShield is another fake anti-spyware app. Despite AntiMalwareShield.com’s claims that it’s the “biggest leader among all antivirus solutions,” AntiMalwareShield doesn’t remove spyware — the only thing AntiMalwareShield removes is $49.95 from your pocket.

AntiMalwareShield probably installed itself onto your computer through a trojan, and AntiMalwareShield tries to scare you into buying it with AntiMalwareShield popups. Unless you like getting ripped off, don’t buy AntiMalwareShield.

Read more about AntiMalwareShield »

PCHealthKeeper 1.4.9.0 Threat Level:

PCHealthKeeper 1.4.9.0 is just another rogue registry repair application; an obvious clone of SafeHardDrive. (Which is a clone of ProtectingTool. Which is a clone of Clean PC Tool. See a pattern yet?)

You might have caught PCHealthKeeper 1.4.9.0 from a Trojan. How do you know if you have PCHealthKeeper 1.4.9.0? More like how don’t you know: a bajillion of PCHealthKeeper 1.4.9.0 popups try to trick you into clicking them. If you click these popups, you’re taken to www.PCHealthKeeper.com to buy the “licensed” version of PCHealthKeeper 1.4.9.0.

PCHealthKeeper? More like PCSanityStealer.

Read more about PCHealthKeeper 1.4.9.0 »

Trojan Virantix Threat Level:

Trojan Virantix is a Trojan that disables your anti-virus software and infect your computer with more malware and spyware, usually by downloading a file from FreeRealityMpegs.com. Trojan Virantix will create a mutex — {393921-e939391-3919139-3d3a738-11} — to make sure it’s always running on your computer. Trojan Virantix may try to scare you into downloading rogue antispyware WinAntivirus with fake security alerts. This Trojan Virantix popup reads:

“Windows Security Alert
Warning! Potential Spyware Operation!
Your computer is making unauthorized copies of your system and Internet files. Run full scan now to prevent any unathorised access to your files! Click here to download spyware remover …
Your computer is infected!”

or

“Your computer is infected!
Windows has detected spyware infection
It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you.
Click here to protect your computer from spyware!”

Trojan Virantix then tries to connect to www.softcashier.com/members/link_____ to download fake antispyware.

Unless identity theft and popups sound like a fun weekend to you, remove Trojan Virantix.

Read more about Trojan Virantix »

Zlob.PornAdvertiser.ba Threat Level:

Zlob.PornAdvertiser.ba is a trojan that appears in fake security alerts from rogue antispyware. Zlob.PornAdvertiser.ba popups could read:

“Windows Security System: Zlob.PornAdvertiser.baAdware Zlob.PornAdvertiser.ba detected. This program advertises sites with explicit content. Please be attentive because advertised content could be illegal”

And popups like this should be illegal. This Zlob.PornAdvertiser.ba popup is supposed to scare you into buying the fake antispyware, like Smitfraud. You may have caught “Zlob.PornAdvertiser.ba” by a drive-by download, or getting tricked into downloading a fake video codec.

Don’t download the software the Zlob.PornAdvertiser.ba popup links to. You’re not really infected with Zlob.PornAdvertiser.ba — you’re infected with fake anti-spyware that wants to take your money.

Read more about Zlob.PornAdvertiser.ba »

Trojan.Win32.BlackBird Threat Level:

Trojan.Win32.BlackBird is a trojan that appears in fake security alerts from rogue antispyware. Trojan.Win32.BlackBird popups could read:

“Your computer was infected with Trojan.Win32.BlackBird.
It’s dangerous for your system, some files can be lost and your browser can be slow!
Click OK to download the antispyware program to clean your computer! (Recommended)”

or

“Your browser was hijacked by Trojan.Win32.BlackBird.”

This Trojan.Win32.BlackBird popup is supposed to scare you into buying the fake antispyware, like Smitfraud. You may have caught “Trojan.Win32.BlackBird” by a drive-by download, or getting tricked into downloading a fake video codec.

Unless you like getting ripped off, don’t download the software the Trojan.Win32.BlackBird popup links to. You’re not really infected with Trojan.Win32.BlackBird — you’re infected with fake anti-spyware that you need to remove.

Read more about Trojan.Win32.BlackBird »

Registry Great v5.0 Threat Level:

Registry Great v5.0 is just another rogue registry repair application. You might have caught Registry Great v5.0 from a Trojan. How do you know if you have Registry Great v5.0? More like how don’t you know: a bajillion of Registry Great v5.0 popups try to trick you into clicking them.

“Registry Great has found a total of 351 critical problems on your PC. Based on your last scan performed, it is highly recommended that you register the full version of Registry Great to completely and immediately clean your computer and repair all these problems. Would you like to register for Registry Great now to remove all these problems?”

Click “CANCEL,” “CANCEL,” “CANCEL,” till your mouse breaks. Otherwise you’ll end up buying the “licensed” version of Registry Great v5.0. What a deal.

RegistryGreat? More like RegistryWorseThanEver.

Read more about Registry Great v5.0 »

System Integrity Scan Wizard Threat Level:

System Integrity Scan Wizard is fake security scan and popup used by rogue anti-spyware, like PC Antispyware 1.4.0148 and PCcleaner. System Integrity Scan Wizard may have been installed by a Trojan. System Integrity Scan Wizard popup is supposed to scare you into buying the fake antispyware. System Integrity Scan Wizard popups may read:

“System Integrity Scan Wizard
Warning: Your computer may have critical errors in Windows registry and file system!”

Unless you like getting ripped off, don’t download the software the System Integrity Scan Wizard popup recommends.

The only “critical error” you have is fake anti-spyware trying to scam you.

Read more about System Integrity Scan Wizard »

SecurityScannerSite.com Threat Level:

SecurityScannerSite.com is another site home to XP Antivirus Protection, one of the latest fake anti-spyware applications. SecurityScannerSite.com offers a free trial of XP Antivirus Protection. Only if you download the XP Antivirus scanner, XP Antivirus Protection gives false positives, and XP Antivirus Protection popups try to trick you into buying XP Antivirus Protection for $49.95.

What a deal.

Despite whatever SecurityScannerSite.com says, if you don’t remember how you got to SecurityScannerSite.com, the only spyware you’re infected with is XP Antivirus Protection.

Read more about SecurityScannerSite.com »