Found some fresh corrupt anti-spyware tools: AdvancedXPFixer and DisableSpyware. These programs uses scare tactics (such as pop-ups and fake system notifications), infects systems via misleading advertising on free download, warez and porn websites, trojans and browser security holes. AdvancedXPFixer and DisableSpyware reports false or exaggerated system security threats on the computer. AdvancedXPFixer looks like WinIFixer.

XPSecurityCenter is a new version of WinReanimator. The program is a rogue antispyware. Usuallly, rogue antispyware infects systems via misleading advertising on free download, warez and porn websites, trojans and browser security holes. XPSecurityCenter reports false or exaggerated system security threats on the computer. The user is then prompted to pay for a full license

S!Ri.URZ and Bharath’s Security Blog reported about new rogue antispywares: Malware Bell and IE Antivirus. Malware Bell Malware Bell is a new version of IE Defender. VirusTotal shows Malware Bell installer: AntiVir 7.8.0.10 2008.04.25 DR/FraudTool.MalwareBell.F DrWeb 4.44.0.09170 2008.04.26 Trojan.Fakealert.525 Fortinet 3.14.0.0 2008.04.26 Misc/MalwareBell Ikarus T3.1.1.26 2008.04.26 Downloader.FraudTool.MalwareBell.F Kaspersky 7.0.0.125 2008.04.26 not-a-virus:FraudTool.Win32.MalwareBell.f NOD32v2 3057 2008.04.26 Win32/Adware.IeDefender.NDG

VirusHeat is the fake anti-spyware, or rogue antispyware program. This program uses deceptive means for installation and purpose, may display fake scan results. This program usually installed itself onto your PC without your permission, through Zlob Trojan, Virus, fake audio/video codecs. Symptoms: Add/Remove Programs control panel entry: VirusHeat 3.9, VirusHeat 4.3 The hijackthis shows: O4