Ghost Antivirus

Ghost Antivirus

Ghost Antivirus is a malicious Windows security program initially found associated with Internet Antivirus Pro. At first attack, Trojan will introduce this rogue on the system and when executed will modify Internet browser settings. When accessing web site, it redirects to a fake virus scanner web page that pretend as Windows Explorer. The web page adopts present hard drives’ setup and provide virus scanning on each accordingly. After the scan, Ghost Antivirus will display fake alert about computer’s security status such as “Serious security and privacy threats found on your computer” and advise to download and install the recommended software. After installation, it modifies the registry that will make Ghost Antivirus run every time Windows starts. Modifying other system settings will also disable locally installed antivirus and security programs. More

Guard Pro

Guard Pro

Guard Pro is a dangerous program that will disguise as computer security protection software. Guard Pro spreads typically over the Internet and promoted on its own fake security web sites. This web site is equipped with a malicious script that will instantly download and install Guard Pro on visitor’s computer. When installed successfully, Guard Pro virus will display fake warning messages. A fake Guard Pro virus scanner will also start automatically. It scans the system and exhibits numerous threats. Then it prompts users to remove these threats but will proceed after payment to registration key has made. Hitting the “remove” button from Guard Pro’s console will redirect user to a payment websites where a fraudulent transaction will take place. More

Desktop Protector 2010

Desktop Protector 2010

Desktop Protector 2010 is another misleading security application that displays fake security alerts and warning messages. Desktop Protector 2010 also reports exaggerated scan results to further convince user that computer is in danger and a purchase of this program is necessary. Rogue programs tend to apply this method to sell the worthless product easily and earn a profit from it. Attackers behind this fraud activity made the program to imitate legitimate security applications scanning process. More

SystemCleanerPRO

SystemCleanerPRO

SystemCleanerPRO, also called as System Cleaner PRO , will disguise as an anti-malware program to attract computer users from installing the unregistered version of it. Once SystemCleanerPRO is on the system, it will generate pop-up alerts and warning messages. It also tries to deceive users regarding security status of the computer by providing falsified threat detection. SystemCleanerPRO alarms user of detected viruses and threats that can be removed by acquiring the licensed version of this program. More

Antispyware Shield Pro

Antispyware Shield Pro

Antispyware Shield Pro will first pretend as an online virus scanner web site that will perform fake detection and alarms visitors of possible security risks. It will ask user to download and install a copy of Antispyware Shield Pro that pretends to be a remover of threats. As you can notice, implementing this is a common tactic to spread and sell fake security programs or commonly known as rogue antivirus. Creation of Antispyware Shield Pro aims to deceive users by issuing fake alerts and warnings messages that force users to register the program. More

Antivirus PC 2009

Antivirus PC 2009

Antivirus PC 2009 virus may be installed on computers without users consent by means of a Trojan and fake security web sites. These web sites employ malicious script that will drop and install Antivirus PC 2009 on visitor’s computer unconsciously. The same Trojan that spreads this fake program may also pretend as a necessary codec (movie player) from swindle multimedia web sites. It will prompt visitors to download and install the Trojan-infected viewer that it claims essential in viewing the requested movie. Unknown to user, the Trojan will silently install the rogue antivirus programs on computer and starts to modify system file and registry entries. More

Total PC Defender

Total PC Defender

Total PC Defender is another fake anti-spyware and security tool that exhibits annoying false security warnings. It attempts to convince user that computer is under attack and a purchase of the registered version is necessary to protect the system. Aside from that, Total PC Defender virus will also run its own scanner and implausibly detect threats that are not present on system. This to tactic aims to deceive users. With the presence of this potentially unwanted program, infected PC may experience sudden reduce in system performance when pointless application keeps on processing in the background. Total PC Defender will modify system registry to add its own entry that ensures self-execution each time Windows starts. More

Worm:Win32/Rebhip-A

Worm:Win32/Rebhip-A is a computer worm that will spread through removable drives like USB Flash Disk, External Hard Drives and Memory Stick. This worm may steal confidential data from infected computer including user name and password. Worm:Win32/Rebhip-A will send collected information to a series of remote computer depending on the variant that infects a system. More

Malware Defense

Malware Defense

Malware Defense virus will keep on spreading over the Internet pretending to be legitimate antivirus software. Its goal is to deceive people with its protection features. When installed on computer, Malware Defense attempts to make changes on computer settings and tries to embed malicious codes on to legitimate system files. This will make Malware Defense undetectable to existing security programs. Once it has done necessary modifications, it will proceed with the promotion stage. A constant reminder and security alerts pop-up will come very timely from Malware Defense prompting users to buy the registered version of this useless program. More