13 Jul 2009 | By Kristopher | Posted under Trojans | 1 Comment »

Windows Malicious Software Removal Tool screenshot Windows Malicious Software Removal Tool actually exists — Microsoft released this anti-badware tool Janury 2005, and it updates monthly to remove malware. Now a Trojan is masquerading as Windows Malicious Software Removal Tool to make a quick buck selling you security software. This fake Windows Malicious Software Removal Tool launches with your system, mimics scanning your computer, and tells you you’re infected with imaginary threats, such as Keylogger.Stawin, Spyware.ActivityKey, Trojan.Qhosts.C, W32.HLLW.Oror.AI@mm and VBS.Lisa.A@MM. also spoof system alerts, creating popups that read, “Security Warning. Your computer is infected with malicious software. You should use antivirus product to remove it. Click this message to purchase recommended antivirus software.”

The fake Windows Malicious Software Removal Tool’s goal? To get you to buy software. If you follow any the fake Windows Malicious Software Removal Tool popup’s prompts, you’re taken to an OEM Purchase Center (http://www.oem-micro-store.com), which pimps software like McAfee Total Protection and Norton 360.

If you’re seeing any of this voodoo, you’re not infected with any badware but this fake Windows Malicious Software Removal Tool. So let me show you how to uninstall this rogue Windows Malicious Software Removal Tool.

Keep reading »


03 Jul 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

System File Modification Alert screenshot “System file modification alert!” is a fake system alert from scareware AntivirusBEST. This spoof “System file modification alert!” popup reads:

AntivirusBEST. System files modification alert! Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised modifications by removing threats (Recommended).”

If any files on your PC have been modified, it’s thanks to AntivirusBEST. If you follow this false system files modification alert, you’ll be tricked into wasting money on AntivirusBEST, which will do nothing but remove dough from your AmEx.

If you’re going to waste money, you may as well do it with me in a Wynn casino.

So let me show you how to remove this spoof system files modification alert, before you toss your computer in a hot tub.

Keep reading »


01 Jun 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

System Warning screenshot “System Warning” is a fake system alert from rogue antivirus software Advanced Virus Remover. As you probably — unfortunately — already know, this “system warning” reads:

System warning! Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. It’s highly recommended you scan your PC right now.”

It’s highly recommended you don’t scan your PC with any software this “system alert” pimps.

Try and close this spoof system warning till your mouse breaks — that won’t make it go away. This false warning is created by Advanced Virus Remover to trick you into wasting money on the scamware. Likely, the only “intercepting program” you’re infected with is Advanced Virus Remover.

I’ll show you how to get rid of this system warning.

Keep reading »


07 Apr 2009 | By Kristopher | Posted under Fake Antispyware | No Comments »

“Firewall Warning” Popup screenshot “Firewall Warning” Popup is a spoof system alert from scareware WinPC Antivirus. This “Firewall Warning” Popup reads:

FIREWALL WARNING. Hidden file transfer to remote host was detected. WinPCAntivirus has detected that somebdoy is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately. Details of the attack: remote host transfer IP 97.216.34.74; remote user computer name ‘FORENSICS’”

If you follow this “Firewall Warning” Popup’s prompts, you’ll end up downloading scareware WinPC Antivirus, which will try to get you to waste $30-50 buying it.

Try to close “Firewall Warning” Popup until your mouse breaks. But that won’t make “Firewall Warning” Popup go away. Let me show you how to remove “Firewall Warning” Popup, for free.

Keep reading »