Author's posts

Windows Basic Antivirus

The Windows Basic Antivirus is a rogue which is installed through FakeCodec scams stating the user needs to update their Flash Player. The Windows Basic Antivirus uses scare tactics with fake alerts stating the PC is infected to get the user top purchase the rogue. Files and Locations: XP <Drive>:\DOCUMENTS AND SETTINGS\<USER>\APPLICATION DATA\Protector-<random Names>.exe Win7 …

Continue reading

Windows Performance Catalyst

The Windows Performance Catalyst is a rogue which is installed through Fake Codec scams and Fake Online Scanner Scams telling the user they need to update their Flash Player or they are infected to get the user to download and install the rogue. The Windows Performance Catalyst uses scare tactics with fake alerts  stating the …

Continue reading

Windows Protection Master

Windows Protection Master is a rogue which is installed through FakeCodec scams stating the user needs to update their Flash Player. The Windows Protection Master uses scare tactics with fake alert pop ups saying the computer is infected to get the user top purchase the rogue. Files and Locations: XP <Drive>:\DOCUMENTS AND SETTINGS\<USER>\APPLICATION DATA\Inspector-<Random Names>.exe …

Continue reading

Internet Defender Rogue of the Fake-Dll Family

The Internet Defender Rogue, a member of the Fake-DLL family which claims to keep your system free of Malware, by scaring the end-user into purchasing “protection” through fake infection warnings. Files and Locations: <Drive>:\Documents and Settings\<User>\Application Data\<Random Names>.avi <Drive>:PROGRAM FILES\Internet Defender\Internet Defender.dll The Internet Defender rogue can be removed with manually, however, because of blocking …

Continue reading

Antivirus Smart Protection Rogue of the FakeVimes Family

Antivirus Smart Protection is a rogue of the FakeVimes Family which comes after the Malware Protection Center clone. The rogue uses the scare tactics of generating pop up fake alerts to get the users infected to purchase the rogue. The FakeVimes rogues also hijacks the hosts file and sets a proxy in the Internet Options, …

Continue reading

Smart Protection 2012 Rogue of the WinWeb Security Family

Smart Protection 2012 is Rogue of the WinWeb Security Family replaces the Security Sphere 2012 clone. This rogue like so many of today’s rogues, block the running of all other applications and the constant pop ups and re-directs to scare messages designed to scare those infected into purchasing the rogue. Files and Locations: %COMMON_APPDATA%\<random named> .exe …

Continue reading

Internet Security 2012 Rogue of the Malware Protection Family

Internet Security 2012 is a rogue that is part of the Malware Protection family of rogues that uses fake alert and fake scan results as scare tactics to get the user to purchase the rogue. Associated Internet Security 2012 Files: %COMMON_APPDATA% \isecurity.exe File Location Notes: %Desktop% means that the file is located directly on your desktop. …

Continue reading

Malware Protection Center Rogue of the FakeVimes Family

Malware Protection Center is a rogue of the FakeVimes Family which replaces the Home Security Solutions. The rogue uses the scare tactics of generating pop up fake alerts to get the users infected to purchase the rogue. The FakeVimes rogues also at times hijacks the hosts file and sets a proxy in the Internet Options, …

Continue reading

Internet Security Guard of the FakeVimes Family

Internet Security Guard is a rogue of the FakeVimes Family which replaces the Home Security Solutions. The rogue uses the scare tactics of generating pop up fake alerts to get the users infected to purchase the rogue. The FakeVimes rogues also hijacks the hosts file and sets a proxy in the Internet Options, Connections, Lan …

Continue reading

Home Security Solutions Rogue of the FakeVimes Family

Home Security Solutions is a rogue of the FakeVimes Family which replaces the Anti-Malware Lab clone. The rogue uses the scare tactics of generating pop up fake alerts to get the users infected to purchase the rogue. The FakeVimes rogues also hijacks the hosts file and sets a proxy in the Internet Options, Connections, Lan …

Continue reading