Wednesday, December 2, 2009

Scareware updates

Here are some more scareware updates. These all look similar and act similar but they have different "names".



AntiAdd is a rogue anti-spyware program that is promoted through the use of Trojans that pretend to be video codecs or flash updates that are required to watch an online video. When this Trojan is installed it will download and install AntiAdd onto your computer and then configure it to start automatically. This same Trojan will also create numerous files in the on your computer with random filenames that are then detected as malware when AntiAdd scans your computer. The program, though, will state that it will not remove these files until you first purchase it. This is obviously a scam as the program detects the files it created in the first place in order to trick you into thinking there are actual malware on your computer. In reality, these files are harmless and do not pose any risk to your computer. Thus this programs scan results should be ignored.


The Trojan that installed AntiAdd will also display fake security alerts and messages on your desktop. These alerts will state that active malware has been found, that your being attacked by a remote computer, or that you are sending sensitive data to a remote location. The titles of these alerts will be Spyware Alert!, Infiltration Alert!, or Security Center Alert!. The Trojan will also display a fake Windows Security Center screen that will suggest that you purchase AntiAdd to protect yourself. Just like the scan results, these fake warnings and messages should be ignored as they are just another attempt to make you think your computer has a security problem.

As you can see, you should not purchase this program regardless of what it may state. If you have already purchased the program, then please contact your credit card company and dispute the charges.



KeepCop is a rogue anti-spyware program that is promoted through the use of Trojans that pretend to be video codecs or flash updates that are required to watch an online video. When a user runs the Trojan it will download and install KeepCop onto your computer and configure it to start automatically. The same Trojan will also create numerous files in the C:\Windows and C:\Windows\System32 folder that are then detected as malware when KeepCop scans your computer. The program, though, will then state it will not remove these files until you first purchase it. This is obviously a scam as the programs creates the same files it will detect to try and trick you into thinking there is actual malware on your computer. The reality is that these files are harmless and do not pose any risk to your computer. Thus this programs scan results should be ignored.


The Trojan that installed KeepCop will also display fake security alerts and messages on your desktop. These alerts will state that active malware has been found, that your being attacked by a remote computer, or that you are sending sensitive data to a remote location. The titles of these alerts will be Spyware Alert!, Infiltration Alert!, or Security Center Alert!. The Trojan will also display a fake Windows Security Center screen that will suggest that you purchase KeepCop to protect yourself. Just like the scan results, these fake warnings and messages should be ignored as they are just another attempt to make you think your computer has a security problem.

As you can see, you should not purchase this program regardless of what it may state. If you have already purchased the program, then please contact your credit card company and dispute the charges.



REAnti is a rogue anti-spyware program that is promoted through the use of Trojans that pretend to be video codecs or flash updates that are required to watch an online video. When this Trojan is installed it will download and install REAnti onto your computer and then configure it to start automatically. This same Trojan will also create numerous files in the on your computer with random filenames that are then detected as malware when REAnti scans your computer. The program, though, will state that it will not remove these files until you first purchase it. This is obviously a scam as the program detects the files it created in the first place in order to trick you into thinking there are actual malware on your computer. In reality, these files are harmless and do not pose any risk to your computer. Thus this programs scan results should be ignored.


The Trojan that installed REAnti will also display fake security alerts and messages on your desktop. These alerts will state that active malware has been found, that your being attacked by a remote computer, or that you are sending sensitive data to a remote location. The titles of these alerts will be Spyware Alert!, Infiltration Alert!, or Security Center Alert!. The Trojan will also display a fake Windows Security Center screen that will suggest that you purchase REAnti to protect yourself. Just like the scan results, these fake warnings and messages should be ignored as they are just another attempt to make you think your computer has a security problem.

As you can see, you should not purchase this program regardless of what it may state. If you have already purchased the program, then please contact your credit card company and dispute the charges.



RESpyWare is a rogue anti-spyware program that is promoted through the use of Trojans that pretend to be video codecs or flash updates that are required to watch an online video. When this Trojan is installed it will download and install RESpyWare onto your computer and then configure it to start automatically. This same Trojan will also create numerous files in the on your computer with random filenames that are then detected as malware when RESpyWare scans your computer. The program, though, will state that it will not remove these files until you first purchase it. This is obviously a scam as the program detects the files it created in the first place in order to trick you into thinking there are actual malware on your computer. In reality, these files are harmless and do not pose any risk to your computer. Thus this programs scan results should be ignored.


The Trojan that installed RESpyWare will also display fake security alerts and messages on your desktop. These alerts will state that active malware has been found, that your being attacked by a remote computer, or that you are sending sensitive data to a remote location. The titles of these alerts will be Spyware Alert!, Infiltration Alert!, or Security Center Alert!. The Trojan will also display a fake Windows Security Center screen that will suggest that you purchase RESpyWare to protect yourself. Just like the scan results, these fake warnings and messages should be ignored as they are just another attempt to make you think your computer has a security problem.

As you can see, you should not purchase this program regardless of what it may state. If you have already purchased the program, then please contact your credit card company and dispute the charges.

****thanks BleepingComputer.com!****

No comments:

Post a Comment