MSNBCcomBreakingNews

March 19, 2009

MSNBC.com – Breaking News, similar to CNN.com Daily Top 10 and CNN Alerts: My Custom Alert is a spam email created by hackers intended to look like it was sent by MSNBC.com. ‘MSNBC.com – Breaking News’ email poses as a notification email that says:

“BREAKING NEWS: Millions of credit card numbers stolen from bank database, find out if you are affected

Find out more at http://breakingnews.msnbc.com..”

If you click on the hyperlink breakingnews.msnbc.com, you will not be taken to msnbc.com, but instead you’ll be redirected to a rogue website where a screen will appear informing you that the Flash player you have has to be updated.

Once you decide to download the Flash player’s latest version, you will be downloading abobe_flash.exe file, which is, in reality, a Trojan Downloader. If the Trojan Downloader is installed, it will open a loophole in your computer system through which additional malware and rogue anti-spyware programs (such as, Antivirus XP 2008) will be installed. Beware of emails that have the following email subjects:

msnbc.com – BREAKING NEWS: Millions of credic card numbers stolen from bank database, find out if you are affected
msnbc.com – BREAKING NEWS: Time Warner sells AOL
msnbc.com – BREAKING NEWS: Americans loves to sue people
msnbc.com – BREAKING NEWS: How to save money on gas

To click and download files that are associated with “MSNBC.com – Breaking News” email may lead to a Trojan Downloader infecting your machine which may modify your Windows Registry, cause the “Blue Screen of Death” screensaver to appear, and display a flood of popups and fake system alert messages.
More Information by Security Experts

Thu, 14 Aug 2008 14:32:15 EST

AntiVir64

March 19, 2009

AntiVir 64, also known as AntiVir64, is a rogue anti-spyware program. AntiVir64 is downloaded and installed onto your computer by a Trojan that may compromise your machine through browser security weaknesses. As soon as AntiVir 64 is installed, it will display false error messages and try to scare you into buying the full version of the program. Malicious AntiVir64 activities may also slow down your computer notably. Nor AntiVir 64 or its “threat reports” are to be trusted. AntiVir64 should be removed from your system as soon as possible. AntiVir64 is a clone of SpyShredder.
More Information by Security Experts

Sun, 17 Aug 2008 11:13:51 EST

Win32privacyremoverm64

March 19, 2009

Win32/privacyremover.m64 is a Trojan name that is displayed in the fake Warning messages that report a spyware infection only to trick you into purchasing a rogue anti-spyware application, which at the moment is XP-Guard.

If “Win32/privacyremover.m64″ fake alert message appears on your computer, you may be infected with a trojan called Zlob. Zlob infects your computer with the help of fake codecs that pretend to be free video codecs, often found on porno websites. If you download free video codecs from questionable websites, it is highly probable that they will be infected with dangerous Trojan programs. Once the Trojan program is installed, you will be bombarded with “Win32/privacyremover.m64″ fake alert messages that may look as this one:

“WARNING! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer.
Warning! Win32/Adware.Virtumonde
Warning! Win32/privacyremover.M64.”

Once you click on this fake alert message, you will be directed to XP-Guard’s website, or another rogue website, where you are persuaded to buy the commercial version of the rogue anti-spyware program. We recommend the immediate removal of Win32/privacyremover.m64, XP-Guard and Zlob from your PC.
More Information by Security Experts

Mon, 18 Aug 2008 19:10:48 EST

MaxAntiSpy

March 19, 2009

MaxAntiSpy, also known as Max AntiSpy, is a rogue anti-spyware program created to trick you into purchasing it’s rogue licensed version. You may have downloaded MaxAntiSpy trial version from its website maxantispy.com (thinking it would remove your spyware infections) or you may have been infected by a Trojan Zlob usually found in fake video codec installers.

Once installed, MaxAntiSpy trial version is able to run a fake system scan and display fake scan results to push you to buy the MaxAntiSpy’s full version of the program. In addition, Trojan Zlob may generate fake popups and system alert messages stating your computer is infected with spyware. These are all attempts used by trojan makers to push MaxAntiSpy’s licensed version.
More Information by Security Experts

Tue, 19 Aug 2008 12:09:26 EST

Win32AdwareVirtumonde

March 19, 2009

Win32/Adware.Virtumonde is an imaginary Trojan name used to threaten and trick users into buying the rogue anti-spyware application XP-Guard. The user gets infected after downloading the video codec that infects the computer with a nasty Trojan. In most cases, the trojan that infects the PC is called Zlob.

Zlob then displays false warning messages stating “Your browser was hijacked by Win32/Adware.Virtumonde” and recommends to download a rogue anti-spyware program, most probably XP-Guard, to allegedly remove Win32/Adware.Virtumonde. However, XP-Guard will not remove Win32/Adware.Virtumonde or fix your PC of other threats but may actually expose you to more security threats.
More Information by Security Experts

Tue, 19 Aug 2008 19:34:52 EST

Win32AdwareVirtumonde

March 19, 2009

Win32/Adware.Virtumonde is an imaginary Trojan name used to threaten and trick users into buying the rogue anti-spyware application XP-Guard. The user gets infected after downloading the video codec that infects the computer with a nasty Trojan. In most cases, the trojan that infects the PC is called Zlob.

Zlob then displays false warning messages stating “Your browser was hijacked by Win32/Adware.Virtumonde” and recommends to download a rogue anti-spyware program, most probably XP-Guard, to allegedly remove Win32/Adware.Virtumonde. However, XP-Guard will not remove Win32/Adware.Virtumonde or fix your PC of other threats but may actually expose you to more security threats.
More Information by Security Experts

Tue, 19 Aug 2008 19:34:52 EST

MSAntivirus2008

March 19, 2009

MS Antivirus 2008, also known as MSAntivirus 2008 and a clone of XP Antivirus 2008, is a rogue anti-spyware program. You may have downloaded MS Antivirus 2008 thinking it would solve your spyware issues, or it may have infected your computer with the help of Trojan Zlob or Vundo usually found bundled with fake video codecs.

Once you’re infected with Zlob, it will use aggressive advertising methods to push it’s rogue website and sell its product, claiming to be able to clean your computer from spyware. Zlob’s deceptive methods include: fake warning alert popups and system notification messages in the Taskbar. The links on the fake warning messages lead to a rogue website where you’ll be convinced to download the a trial version of MS Antivirus 2008.

MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. This approach is to lead you to believe that you’re infected with a load of spyware, when, in reality, is MS Antivirus 2008 the cause of the spyware. MS Antivirus 2008 is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full MS Antivirus 2008 version. MS Antivirus 2008 may launch on every Windows startup.
More Information by Security Experts

Thu, 21 Aug 2008 13:07:09 EST

Follow

Get every new post delivered to your Inbox.