Wednesday, December 2, 2009

Scareware updates

Additional screen shots and information on new scareware versions. Please keep in mind that these can result in serious damage to your computer as well as possible identity and banking information theft and even complete loss of control over yoru computer. If you see something similar to these pictures please call a professional as soon as possible!



Additional Guard is a rogue anti-spyware program that is promoted through the use of fake online scanner sites and misleading advertisements. When this program is installed it will be configured to start automatically. The installer will also create numerous files on your computer that will then be detected as malware by Additional Guard when it scans your computer.

While Additional Guard is running you will also see a constant barrage of fake security alerts and warnings appear on your desktop. These warnings will state that a virus has been detected or that active malware is sending data on the Internet. Just like the scan results, these fake security alerts are just another method where the program is trying to trick you into thinking that you have a security problem.

Without a doubt, Additional Guard is a scam designed to trick you into purchasing the program to remove fake infections. It goes without saying that you should not purchase this program and if you already have, we suggest you contact your credit card company to dispute the charges.



Antivir is a rogue anti-spyware program that is promoted through the use of fake online anti-malware scanners. When browsing the web you may see a pop-up that states your computer is infected and that you should run an online anti-malware program to scan your computer for infections. If you click on this pop-up you will be brought to a site that shows an advertisement that pretends to be an online anti-malware scanner. At the end of the advertisement, it will state that your computer is infected and that you should download and install Antivir to protect yourself.

When Antivir is installed it will be configured to start automatically when Windows starts. Once started it will scan your computer and list numerous infections on your computer, but will not allow you to remove them until you purchase the program. The reality is that the infections it finds are legitimate programs that should not be deleted as it may cause your computer to not run properly. Therefore, please do not purchase this program or act on any of the scan results that are show.




Eco AntiVirus 2010 is a rogue anti-spyware program that is promoted through the use of fake online anti-malware scanners. When browsing the web, you may be shown a pop-up that states that your computer has security problems and that you should click OK to run an online anti-malware scanner. When you click on the OK button, you will be brought to a page that shows an advertisement that pretends to be an online scanner, that when finished, states your computer has various infections and that you should download and install Eco Antivirus 2010 to protect your computer. It is important to remember when you see pop-ups like these, that they are advertisements and they have no way of knowing what is running on your computer.

Once Eco AntiVirus 2010 is installed on your computer, it will be configured to run automatically and scan your computer. When the scan has finished it will state that you have numerous infections, but will not allow you to remove them until you first purchase the program. These infections, though, are all fake and do not exist on your computer or are legitimate programs it is stating are infections. Therefore, please do not act on these scan results as you may be deleting valid Windows files.

This program will also install a Internet Explorer Browser Helper Object that will hijack Internet Explorer. This hijack will display messages when you browse the web that states that the particular page may be a phishing site or that your computer has a security problem. All of these alerts, like the scan results, are fake and should be ignored.



Personal Security is a rogue anti-spyware program from the same family as Cyber Security. This program is promoted through the use of malware that will install it on your computer without your permission. In order to protect itself, this program will automatically attempt to terminate security programs that may help to remove it. When installed, Personal Security will be configured to start automatically when Windows starts. Once started, it will scan your computer and display a variety of infections, but will state that it will not remove them unless you first purchase the program. In reality, the infections it finds are either fake or legitimate programs that if deleted could cause problems with the proper operation of Windows. Therefore, please do not act upon any of the files it states are infections.

Personal Security also employs numerous methods where it tries to trick you into thinking you are infected. The first method is the display of a Window that impersonates the legitimate Windows Security Center. The difference is that this fake version suggests you purchase Personal Security to protect yourself. The program will also display numerous security warnings on your computer stating that there is a security problem on the infected computer.

This program may also display a screen saver that pretends to be a Windows crash, or Blue Screen of Death, that states your computer is infected with the SPYWARE.MONSTER.FX_WILD_0x00000000 malware and that it crashed your computer. It then pretends to reboot your computer. Please remember that this is a screen saver and the crash and subsequent reboot are not real. Last, but not least, this program will hijack Internet Explorer so that it randomly displays a warning message when browsing the web.

Just like the scan results, all of these warnings messages are fake and are only being shown to scare you into thinking that there is a security problem on your computer. Therefore, please ignore these warnings.



Enterprise Suite is a rogue anti-spyware program that is promoted through the use of fake online scanner sites and misleading advertisements. When this program is installed it will be configured to start automatically. The installer will also create numerous files on your computer that will then be detected as malware by Enterprise Suite when it scans your computer.

This method of creating the files that will be detected by the same program is becoming more and more common with rogues. They do this to substantiate the existence of supposed malware files even on machines that are completely clean. Therefore, please do not believe any of the scan results presented by this program.


While Enterprise Suite is running you will also see a constant barrage of fake security alerts and warnings appear on your desktop. These warnings will state that a virus has been detected or that active malware is sending data on the Internet. Just like the scan results, these fake security alerts are just another method where the program is trying to trick you into thinking that you have a security problem.

****thanks BleepingComputer.com!****

No comments:

Post a Comment