20 Mar 2008 | By Kristopher | Posted under BHOs, Browser Hijackers, Fake Antispyware | No Comments »

SecurityPills.com Threat Level: SecurityPills.com is a pest

SecurityPills.com screenshotSecurityPills.com is a browser hijacker that redirects your home page to SecurityPills.com. Like PureSafetyHere.com – and SecureInvites.com, and PageforSafety.com – , which SecurityPills.com is a clone of, SecurityPills.com pimps rogue anti-spyware, such as AntiSpyware Shield and WinSpyKiller. SecurityPills.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SecurityPills.com popup reads:
Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software. Always keep your patch levels up-to-date.

If you click “OK” you’re taken to MalwareCore.com to waste money on fake anti-spyware.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SecurityPills.com. And the only thing SecurityPills.com and its rogue anti-spyware removes is money from your pockets.

So remove SecurityPills.com.

Keep reading »