| 

Guard Pro

  • Post author: Omid Farhang
  • Post published: January 13, 2010
  • Reading Time: 1 min
  • Word Count: 115 words

Guard Pro is a rogue antispyware software, or a phony. Guard Pro uses fake system scans and warnings to frighten people into buying the software. Guard Pro will show system scan results that report numerous infections, which are all fake, and will not remove the supposed infections until the user buys the product. Do not fall for this, it is a complete scam, Guard Pro is the infection itself. Guard Pro will also show system warnings and alerts stating the PC is infected or under attack and prompts the user to buy the software. ...

Continue Reading Guard Pro

Warning On Possible Android Mobile Trojans

  • Post author: Omid Farhang
  • Post published: January 13, 2010
  • Reading Time: 2 min
  • Word Count: 347 words

Googleā€™s Android mobile operating system has been out for a while and is generating more and more interest. Now there has been some buzz about fraudulent applications being posted on the Android Market. See these postings: Both of these apps were written by an anonymous developer known as 09Droid. In fact, he had a whole collection of online banking applications for sale on the Market: ...

Continue Reading Warning On Possible Android Mobile Trojans

OWA-Malware is still being sent

  • Post author: Omid Farhang
  • Post published: January 13, 2010
  • Reading Time: 1 min
  • Word Count: 35 words

The Internet Storm Center reports that malware which claims to be ā€œnew Outlook Web Access settingsā€ is still being sent out by cyber criminals. We saw those malware emails in the middle of October already.

Continue Reading OWA-Malware is still being sent

InSysSecure

  • Post author: Omid Farhang
  • Post published: January 13, 2010
  • Reading Time: 1 min
  • Word Count: 59 words

InSysSecure is a rogue security program, designed to rip people off. InSysSecure uses false security warnings, alerts and system scans to frighten people into thinking their computer systems are infected, all the while InSysSecure is the actual infection. if your system is infected with above malware, you should remove it soon, Click Here to learn how to remove it.

Continue Reading InSysSecure

W32/Fame

  • Post author: Omid Farhang
  • Post published: January 12, 2010
  • Reading Time: 1 min
  • Word Count: 89 words

Unlike the first malware authors who wrote viruses seeking fame through destruction, their motivation has changed to financial gain. Nevertheless, there are still the ones out there who share the first authorsā€™ intent. I was analysing a simple Trojan today and saw the following message: It is not uncommon for malware authors to leave messages in their code forĀ Researchers to read. This one did bring a smile to my face, so he was rewarded by it being named BackDoor-EKD which is an increment of one from BackDoor-EKC šŸ˜‰ ...

Continue Reading W32/Fame

SysProtector

  • Post author: Omid Farhang
  • Post published: January 12, 2010
  • Reading Time: 1 min
  • Word Count: 107 words

SysProtector and ApcDefender are two new rogue antispyware programs released in the past 48 hours. SysProtector and APCDefender are potentially very dangerous PC infections. These rogues use fake security alerts and warnings to trick people into thinking their PC is under attack, all the while they drop fake files on the system. These rogues will also prevent other programs from opening, hijack the web browsers and render the PC nearly useless. Below is a screenshot of a hijacked browser, showing fake threat warnings. ...

Continue Reading SysProtector

No Malware (NoMalware)

  • Post author: Omid Farhang
  • Post published: January 6, 2010
  • Reading Time: 1 min
  • Word Count: 154 words

No Malware is a rogue security program, or a phony. NoMalware is designed to trick people into purchasing the software, which is actually useless, a PC infection in itself. NoMalware will use security scans to alert the user that their PC is infected. These security scans are not real, the infections reported are false. NoMalware will show these falsified scan results and refuse to remove the supposed infections unless the user buys the software. Do not fall for this scam. Victims that purchase NoMalware quickly lean that the software does not prevent infections or remove infections form their PCā€™s.Ā ...

Continue Reading No Malware (NoMalware)

Gaming Trojans: ā€œbecause thatā€™s where the money is.ā€

  • Post author: Omid Farhang
  • Post published: January 6, 2010
  • Reading Time: 2 min
  • Word Count: 330 words

The massive growth of gold farming ā€“ the exchange of real money for virtual goods ā€“ might result in an increase in gaming Trojans and other malware aimed at gamers in the future. A well-respected researcher has described the incredible growth of ā€œgold farming,ā€ an significant industry and source of employment in China and other parts of Asia. He estimates there are 400,000 people, working for gold farming companies. They spend as much as 12 hours per day playing online games in order to accumulate virtual goods which can be sold to some of the 50 million on-line game players world wide for real cash. ...

Continue Reading Gaming Trojans: ā€œbecause thatā€™s where the money is.ā€

Flash, Christmas and the new year

  • Post author: Omid Farhang
  • Post published: January 6, 2010
  • Reading Time: 1 min
  • Word Count: 172 words

We see spam all the time. One of the most dependable things spammers do is to try and exploit various newsworthy events and holidays. Recently, we have seen spammers spreading malware using a combination of either or both flash updates andchristmas scams. Add one more to that list. Take for example, a spam I received today. The following email wishes the recipient a Merry Christmas and a Happy New Year, and then displays the following screen in an attempt to entice the user to click on the message. ...

Continue Reading Flash, Christmas and the new year

Thrice Bitten, Not Shy

  • Post author: Omid Farhang
  • Post published: January 6, 2010
  • Reading Time: 2 min
  • Word Count: 232 words

The one subset of malware which does not immediately seem motivated by financial incentives is the autorun worm. In fact the raison dā€™etre for this class of malware seems lodged in the annals of yesteryear; summarised in three words it could be ā€œnaive script-kiddy kudosā€. Unlike the propagators of other classes of malware, ie professional criminals, the writers of autorun worms are amateurish upstarts. Ample evidence for this assertion may be found in a recent sample of Sohana, a family of autorun worms, which was cloaked in three layers of known virus infections: the ancient W32/Flcss over W32/Scribble-B over W32/Impair-A. ...

Continue Reading Thrice Bitten, Not Shy