Antivirus XP 2008 is a rogue antispyware application that is starting to infect a lot of users. This particular infection is harder to remove. Also Antivirus XP 2008 installed in your Internet Explorer browser that hijacks searches you input into the Google search engine. This program usually installed itself onto your PC without your permission,
-
-
How to remove trojans that uses autorun.inf file
A group of dangerous trojans which uses autorun.inf file to infect computer called autorun.inf trojans. Once infected with autorun.inf trojan your computer will display many popups, Internet Explorer start page can to be change, TaskManager and Registry editor can be disabled. Also autorun.inf trojan configures itself to run automatically every time, when you start your
-
Trojan Vundo/Virtumonde turns a good file into a Trojan-Dropper
VirusList posted about new variant Trojan Vundo/Virtumonde. Vundo Authors are now using file infection so Virtumonde checks which files run at Windows startup and tries to infect them. Effectively this means that Virtumonde turns the original host file into a Trojan-Dropper. Dropper code is prepended to the original host file, with a copy of Virtumonde
-
Found some new fake codecs
Sunbelt blog reported about some new fake codecs: codechq – codechq(dot)net Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codechq(dot)net/download/codechq(dot)dmg; Windows: codechq(dot)net/download/codechq(dot)exe. vplprocedure – vplprocedure(dot)com Sample binary vplprocedure(dot)com/download.php?id=10581 codectime – codectime(dot)com Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codectime(dot)com(dot)/download/codectime(dot)dmg; Windows: codectime(dot)com(dot)/download/codectime(dot)exe If you cannot remove fake codecs follow the steps in the
-
How to remove shell.exe, spoolvs.exe trojan
Shell.exe and spoolvs.exe are components of trojan known as TROJ_RENOS.BX, Trojan.Win32.Qhost.abh , Trojan.Dropper, TR/Crypt.XDR.Gen, W32/Blocker-based!Maximus, Mal/TinyDL-T. Shell.exe and spoolvs.exe trojan symptoms: Start > Settings -> Control panel is missing Task bar icons informing you of an infection and taking you to legit looking security panel System pop ups and IE pop ups When you start
-
Some new fake codecs
Fake codec is actually a trojan download installer, It will change your home page to one a scam site. It produces unwanted popup to sell rough security software. These sites hosted codecs: gneprogram(dot)com ndcperformance(dot)com mzdsoftware(dot)com pkbsolution(dot)com zerocodec(dot)com Also zangcodec, playcodec. They Pushes Windows and Mac TrojanDNSChanger. Block them now! Use for that any hosts file
-
How to remove DNSChanger malware virus [Updated Apr. 2018]
DNSChanger Trojan is name of a group of trojans (zlob dns changer, Troj/Rustok-N, W32/Tidserv. gaopdxserv.sys trojan, UACd.sys trojan, …).Once installed, it will redirect any web-browser to malicious, misleading, spam and other unwanted websites. DNSChanger trojan has be able to gather lots of privacy information which can be later sold to third party companies. You don’t
-
Fake codecs story continue … found some new fake codecs
Fake codec is actually a trojan download installer, It will change your home page to one a scam site. It produces unwanted popup to sell rough security software. The codecs also install one of the Anti-spyware rogues currently AntiVirGen. They give false positives along with alert bubbles to scare users into buying their software which
-
Found fake microsoft update popup
Many individuals reported to the MySpace abuse team about very realistic fake update popup. This thing is quite realistic. And if you click “Download”, you get an offer to install a nasty little Trojan. The trojan, “updateKB890830.exe”, downloads from a site that looks like a Microsoft url, so it’s all quite realistic to the user.
-
Found trojan that attempts to steal money by selling a fake iPhone
Sunbelt team reported about new trojan that attempts to steal money by selling a fake iPhone. The malware produces a popup, triggered by going to yahoo.com or google.com. There are multiple types of popups, including one saying “supported by Google” and one “supported by Yahoo”. Normally, when you go to iPhone.com, you get redirected to
 |
 |
 |
