411 on Spyware » Conficker http://www.411-spyware.com 411-Spyware.com Thu, 18 Mar 2010 23:37:33 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Win32/Nuqel.E http://www.411-spyware.com/remove-win32-nuqel-e http://www.411-spyware.com/remove-win32-nuqel-e#comments Mon, 08 Jun 2009 14:41:27 +0000 Kristopher http://www.411-spyware.com/?p=4640 Win32/Nuqel.E screenshot Win32/Nuqel.E is a Trojan that appears in fake system alerts and scans by scareware Antivirus Sysem PRO and Spyware Protect 2009. This Win32/Nuqel.E alert reads:
"Antivirus System Pro alert. INFILTRATION ALERT: Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan-dropper or similar. DETAILS: Attack from 235.157.169.3, port 40771; Attacked port 22363; Threat Win32/Nuqel.E. Do you want to block this attack?" Or: "Spyware Protect 2009 alert. INFILTRATION ALERT. Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar. DETAILS. Attack from: 84.154.14.114, port 34940. Attacked port: 50507. Threat: Win32/Nuqel.E. Do you want to block this attack?"
Click "No" until your mouse breaks. So is Win32/Nuqel.E really a threat? Win32/Nuqel.E may have been true badware, ages ago. Now, the worst Win32/Nuqel.E will do is scare you into wasting money: if you follow Win32/Nuqel.E alert's prompts, you'll end up blowing dough on scamware to "remove" Win32/Nuqel.E. If you're getting Win32/Nuqel.E popups, you're not infected with Win32/Nuqel.E -- you're infected with fake anti-spyware software that you need to remove. I'll show you how to get rid of Win32/Nuqel.E for free.]]> http://www.411-spyware.com/remove-win32-nuqel-e/feed 63 Windows Security Alert http://www.411-spyware.com/remove-windows-security-alert http://www.411-spyware.com/remove-windows-security-alert#comments Mon, 25 May 2009 22:00:39 +0000 Kristopher http://www.411-spyware.com/?p=4644 Windows Security Alert screenshot "Windows Security Alert" is a fake system alert created by scareware Spyware Protect 2009. This "Windows security alert" reads:
"Windows Security alert. Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now."
What's the tip off this Windows security alert is a sham? How about its English-as-a-second-language poetry? And besides that, do you think Billy Gates would actually have Windows urge you to download non-Microsoft software? The only thing "your system might be at risk" for is blowing dough on Spyware Protect 2009: if you follow this "Windows security alert"s prompts, you'll end up wasting money on fake anti-spyware software Spyware Protect 2009. Let me show you how to remove Windows Security Alert and Spyware Protect 2009, for free. ]]> http://www.411-spyware.com/remove-windows-security-alert/feed 3 Spyware Protect 2009 http://www.411-spyware.com/spyware-protect-2009-removal http://www.411-spyware.com/spyware-protect-2009-removal#comments Thu, 21 May 2009 14:08:38 +0000 Kristopher http://www.411-spyware.com/?p=3204 Spyware Protect 2009 screenshot Spyware Protect 2009 is just more scamware, disguised as antispyware software. You probably got infected with Spyware Protect 2009 through Conficker, the headline-making worm that's infected millions of PCs. Like other scareware, Spyware Protect 2009 tells you you're infected with threats that don't exist, and then demands you use Spyware Protect 2009 to remove them. Even if you see through the scam, you're sanity is threatened by Spyware Protect 2009 popups. Before you set fire to your PC to stop Spyware Protect 2009 popups, you can remove Spyware Protect 2009 for free with my instructions below. However, if you have SpywareProtect2009, you may also have Conficker worm. Use this eye chart to see if you have Conficker worm. If Conficker blocks your access to antivirus software or sites, follow our free Conficker removal instructions.]]> http://www.411-spyware.com/spyware-protect-2009-removal/feed 148 INF/Conficker http://www.411-spyware.com/remove-inf-conficker http://www.411-spyware.com/remove-inf-conficker#comments Tue, 12 May 2009 17:56:02 +0000 Kristopher http://www.411-spyware.com/?p=4528 INF/Conficker is the latest version of the headline-making Conficker worm. As usual, INF/Conficker blocks your access to security sites (such as McAfee.com, Microsoft.com, and Symantec.com) and anti-badware software (Windows Defender Service, Windows Security Center Service, and more). INF/Conficker has also been linked to pimping scareware Spyware Protect 2009. So what's new with INF/Conficker? INF/Conficker gets its name as it spreads via an "autorun.inf." By doing this, Conficker can automatically infect every mapped and removable drive. Let's get rid of INF/Conficker before even more machines are infected.]]> http://www.411-spyware.com/remove-inf-conficker/feed 0 Conficker.c http://www.411-spyware.com/conficker-c-removal http://www.411-spyware.com/conficker-c-removal#comments Tue, 31 Mar 2009 05:46:52 +0000 Kristopher http://www.411-spyware.com/?p=4080 http://www.411-spyware.com/conficker-c-removal/feed 0