How to remove Browsersecurecheck.com hijacker

10.03.2010 | Malware Type: Browser Hijackers

Malware Description:
Browsersecurecheck.com has been identified as a hijacker that takes over one’s browsing and redirects a user to fraudulent payment web pages. Typically, people run into diverts to Browsersecurecheck.com if their systems get jacked up by backdoor trojans that hinder normal web-surfing. The common symptoms of Browsersecurecheck.com hijacker’s presence on your computer are as follows: Internet connection problems and inability to visit any websites other than the URL in question itself. Initially, victims get redirected to Browsersecurecheck.com/block.php which appears to notify them about the blocked Internet attack. In its turn, this falsified warning page redirects to a script meant for selling Antivirus 7 rogue anti-spyware which we analyzed yesterday (please check the link to learn more about this threat). Consequently, the hijacker involves you into the permanently repeating loop of browser redirecting activity. This is really annoying and hazardous in a way. The security hole opened by this hijacker will be potentially used by other infections to get inside. What is more, Browsersecurecheck.com will keep you from having normal Internet sessions unless you eliminate this problem by deleting the trojans that cause this whole issue in the first place. It sure goes without saying that Antivirus 7 which is being pushed through Browsersecurecheck.com must not be purchased. It is crimeware that tries to get hold of your money and run. All details as to the recommended actions in case Browsersecurecheck.com hijacker hits you are provided further.

How to remove Smart Security rogue anti-spyware

10.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
Smart Security is a really obnoxious application possessing considerable destructive capabilities and thus posing a threat to the functioning of the workstation it installs on to. Smart Security has evidently borrowed its User Interface design from another rogue anti-spyware product known as Security Tool which has been in rotation since September 2009. We assume Smart Security is going to replace its retired clone we have mentioned. The most widespread methods for Smart Security propagation are fraudulent SEO and blackhat social engineering combined with the usage of trojan viruses which actually carry the load of Smart Security malcode. When this rogue software identifies a new host system, it quickly gets down to changing the Registry in order to dominate the OS it has injected. Smart Security will shortly start bombarding the victim-user with exaggerated pop-ups, infiltration alerts and of course the fake virus scanners which are integral component of any scareware campaign. One of such fabricated scans is shown below. As you can see, Smart Security tries to pretend to be helpful despite being useless and hazardous in fact. It reports a variety of infections on your computer and then starts demanding money in exchange for their removal. It’s curious that Smart Security doesn’t really find any PC threats, which makes it obvious that there’s no need removing them. The only thing Smart Security wants is the money of its victims whose computers it compromises. When you try to uninstall Smart Security, you will realize that it might be quite complicated. It may prevent you from opening Task Manager and not let you remove it via Control Panel (simply because it won’t be listed there). This is why we advise that you enter Safe Mode with Networking before following Smart Security removal recommendations we have listed below.

How to remove Antivirus 7 rogue anti-spyware

09.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
Antivirus 7 is a really nasty program that renders one’s computer world completely disrupted. The insight into this malicious software reveals a couple of essential things. First of all, Antivirus 7 appears to represent the same group of rogue anti-spyware tools as Antivir which has been one of the dominating crimeware applications of the last several months. Unlike regular security software, Antivirus 7 is spreading through backdoor techniques involving blackhat SEO and malicious social engineering. It’s most likely that you won’t spot the intrusion of this scareware since it tends to find some practically imperceptible paths into your system. When running on your workstation, Antivirus 7 displays lots of false claims about malignant programs which have been purportedly detected on your PC. The scamware won’t stop at that point though. It will keep issuing admittedly falsified ads such as the phony security scanners that accompany every single system start. These scanners will run and eventually display some reports that state Antivirus 7 has intercepted yet more infections on your computer. Additionally, Antivirus 7 will be sure to hijack your browser and keep redirecting you to falsified online scan sites. This nightmare is pursuing one and only objective – to make you actually fall for the supposed malware detection facts and begin looking for some help out of this. And there it goes - Antivirus 7 will then offer you a remedy in the shape of its licensed copy. You must have figured out that you can’t use the full version of Antivirus 7 unless you go ahead and purchase it. This is how the bad Internet guys get rich. Hackers tend to use malicious programs such as Antivirus 7 to make you believe something is amiss with your computer and then take advantage of your assumed credulity recommending you to buy its full version. That’s not commendable of course, to put it mildly. Antivirus 7 must be expelled before it turns your computer into a bunch of microchips that are no use. Antivirus 7 makes your system weak and gradually destroys it unless uninstalled on time.

How to remove Vista Internet Security 2010 rogue anti-spyware

09.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
There has appeared a new rogue antivirus threat lately denominated Vista Internet Security 2010. It is mendacious fraudware that needs disinfecting if it finds itself on your workstation. Vista Internet Security 2010 propagation is based on exploiting trojan-related tactics and blackhat SEO methods. Taking this into account, we can state that one is not likely to notice the intrusion of this disgusting malware which initially comes as unregistered version. After a short while of adapting the system parameters to its malignant plan, Vista Internet Security 2010 commences issuing falsified warning messages such as the one shown below. This practice is being applied just to attract your attention to the purported (and doubtful) fact that your computer needs urgent security help since it’s infected with ‘critical system objects’. No need to make separate accent that these alerts are not true and they in no way reflect the status of your system for real. Vista Internet Security 2010 will not stop there just displaying fake warning messages like that. It will get configured to run once Windows Vista loads; right upon system boot/reboot, Vista Internet Security 2010 will generate its scanners that are just the same scam as the notifications we mentioned above. The report of each such scan will recommend you to click the button leading to Vista Internet Security 2010 registration page. It’s certainly not free to register this software so you will be ‘kindly’ asked to enter your credit card details and submit the required payment. In fact, Vista Internet Security 2010 can only help you remove the imaginary infections which are not there. It is not able to spot or remove actual PC parasites, which makes this software totally worthless. Along with being no use, Vista Internet Security 2010 is dangerous because it stuffs up the system with unwanted executables rendering your computer slow. The application we described is not safe and must be expelled from your system.

How to remove Win 7 Guardian 2010 rogue anti-spyware

08.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
Win 7 Guardian 2010 is a fraud application that crosses all possible boundaries of normal antivirus software perception. Win 7 Guardian 2010 is sort of particular in a way and differs from the vast majority of fake anti-spyware programs. As one can figure from the name, Win 7 Guardian 2010 hits computers running Windows 7 Operating System. It’s curious that the same malicious downloader will automatically acquire a different personification if installed on a different OS. So let’s have a look how Win 7 Guardian 2010 injects computers and what it does further. This cyber malady is usually ‘caught’ if one clicks on some tricky links when surfing the web. The malcode associated with the scareware under consideration can as well go as obscure cargo attached to suspicious spam Emails or some files disguised as helpful software. This backdoor infiltration technique makes it almost impossible to intercept Win 7 Guardian 2010 when it’s getting on board. The initial fragment of Win 7 Guardian 2010 activity following its intrusion consists in changing Windows Registry and modifying some Program files (adding new corrupt ones). It will inevitably lead to execution of this scamware’s processes which will determine the specificity of your system’s functioning further on. While running, Win 7 Guardian 2010 will generate many ads and scanners all of which are fabricated and must be disregarded. This nasty software will try to use its fake malware detection reports to have you believe your system is at risk and badly needs to be remedied. Win 7 Guardian 2010 attempts to use these tricky scare tactics to make you buy its commercial version. But instead of purchasing this fake security program, you should get rid of it for good.

How to remove CleanUp Antivirus rogue anti-spyware

07.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
CleanUp Antivirus (or Clean Up Antivirus) is a new fraud tool from the creators of Security Antivirus scareware program. CleanUp Antivirus trespasses the line of regular AV software by intruding on computers without any preliminary notice, i.e. it won’t ever ask for user approval before installing onto his/her workstation. This rogue security software gets distributed via the assistance of trojan horses that tend to impudently attack a system by exploiting some vulnerabilities and splits of the potential target OS. As you can see, CleanUp Antivirus does not lack trickeries in terms of propagation methods. Once this scamware successfully downloads onto your PC, it adds a number of files which are meant to be further ‘found’ by CleanUp Antivirus and labeled infections. But the worst part of CleanUp Antivirus activity is its Windows Registry interference which it conducts in order to force your system into running certain executables that are critical to this malware’s deployment. When CleanUp Antivirus is running on your machine, it will be constantly reporting the detection of security threats and other issues. These deemed infections are completely fabricated though; those are predominantly the junk dummy files we mentioned above. Believing that you actually have those hazards on your PC is precisely what hackers want you to do. But you should be on top of things and refrain from taking CleanUp Antivirus ads and scanners for granted. When trying to get rid of CleanUp Antivirus you may run into a couple of complications though. It will not be presented on Add/Remove Programs list; it might as well prevent you from accessing Task Manager and deleting its directory under Program File. This is why we recommend you to enter Safe Mode with Networking by repeatedly hitting F8 key during PC startup; then, please follow the instructions listed under this post.

How to remove Av-guru.microsoft.com hijacker

06.03.2010 | Malware Type: Browser Hijackers

Malware Description:
The only case you hit Av-guru.microsoft.com domain is if your computer is infected with phony anti-spyware. As a matter of fact, the technical background behind the URL in question might seem confusing to you first so allow us to provide info as comprehensive as possible. Av-guru.microsoft.com is not a real website in fact, it’s targeted simulation of trustworthiness associated with Microsoft. In other words, one is not able to visit Av-guru.microsoft.com if this URL is simply typed in the browser address line. The explanation lies in the scope of Antivirus Soft scareware being capable of modifying Windows HOSTS file on the infected Operating System. This sort of activity turns your web-surfing upside down as you will not be able to visit websites. When you try to go to some site of your own, you will keep getting Av-guru.microsoft.com instead. Now, let’s take a quick insight into what this page looks like. It’s a counterfeit warning site that poses as Internet Explorer alert. It tells you that some unsafe Internet activity has been intercepted so you will be recommended to click one of the options available on the bottom. Once you do you will get to see another site associated with Antivirus Soft. It’s Av-guru.net and it appears to be Antivirus Soft official website. That’s exactly where hackers intended Av-guru.microsoft.com to direct you. Av-guru.net prompts people to register Antivirus Soft licensed copy but you should not do that. Or else you will simply waste a pretty sum of money and put your PC in big jeopardy. This is all why we advise you to treat Av-guru.microsoft.com site with caution. It’s a browser hijack implementer that ought to be avoided. In case your browser is taking you to Av-guru.microsoft.com, it’s necessary to perform a system scan with a trusted antivirus application to find and eliminate all unwanted parasites.

How to remove Av-guru.net hijacker

05.03.2010 | Malware Type: Browser Hijackers

Malware Description:
What’s particular about Av-guru.net is the fact that it appears to be one of the multiple domains involved in promotion of scareware. Actually, it’s quite safe to visit Av-guru.net through typing its URL in your browser address field; if you do you can see that it’s about Antivirus Soft which is stated to be a really useful tool for one’s computer protection. Even the slogan “Protecting every second” implies that Antivirus Soft is safe and reliable. But that’s just the first impression which can often turn out misleading. The software being pimped on Av-guru.net is in fact rogue anti-spyware which targets workstations to eventually make people pay some money. This website under analysis turns into a real bug if you go there resulting from a browser redirect implemented by Antivirus Soft after it infiltrates your computer. In that case, you are very unlikely to be able to surf the Internet in a regular unhampered way. A random site you will try to go to will be automatically replaced by Av-guru.net. By the way, a certain URL extension of Av-guru.net may bring you to a bogus alert page which is shown on screenshot 2 below. The overwhelming idea of Av-guru.net and sibling insecure domains is to artificially generate traffic to online pages that distribute the paid commercial version of Antivirus Soft. So first, this rogueware scares you to make you start thinking something is amiss. Then, it’s Av-guru.net’s turn to make the finishing strokes and tell you that Antivirus Soft is the right tool for you to use for spyware defense (which is beyond doubt a deceitful statement). So if you get forcibly navigated to Av-guru.net it means you have some trojans on board. Resolving this issue is possible through a system cleanup procedure which will eliminate all threats that could potentially be causing this disgusting browser activity.

How to remove XP Antispyware 2010 rogue anti-spyware

04.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
XP Antispyware 2010 has evidently appeared in the software world to make it worse. This program is a scam tool developed by computer criminals. It’s rogue anti-spyware, which implies it’s targeting money retrieval from credulous people. This crimeware spreads through exploit kits and hijacker domains hosting the corresponding malicious downloader. When we were analyzing XP Antispyware 2010 on our test workstation, here is what we saw. The first thing it does is running a scanner that supposedly impersonates checking your system for unsafe software and all types of infections. Conforming to what we had predicted, XP Antispyware 2010 scanner returned results that claimed we had 25 infections on the perfectly clear Operating System. That’s odd, isn’t it? Well, it’s just the beginning though. XP Antispyware 2010 went on and started displaying system tray notifications at random. Those started warning us about system hijack, privacy threats and similar issues. Of course, those are not true either. Then, just like an average PC user, we tried to open Internet Explorer to find some information on XP Antispyware 2010 and how to treat it. But the moment IE shortcut was clicked, we received a popup warning that said “XP Antispyware 2010 Firewall Alert”. It informed us that the web browser was infected with Trojan-BNK.Win32.Keylogger.gen. We proceeded by clicking the ‘Continue unportected’ option, and then tried to type in some URL into the address bar. What we got instead of the targeted website was a page reading “Internet Explorer alert. Visiting this site may pose a security threat to your system!”. So it appears that XP Antispyware 2010 blocks the Internet connection to prevent people from seeking some solutions to get this pest removed. Considering this, if you got attacked by XP Antispyware 2010, we advise you to either use an alternative browser, or boot into Safe Mode by hitting F8 button before Windows starts loading. Safe Mode with Networking should prevent this rogue from blocking things like IE and similar. A complete XP Antispyware 2010 removal guide is provided below, so please check it out.

How to remove Antivirus Vista 2010 rogue anti-spyware

02.03.2010 | Malware Type: Rogue Anti-Spyware

Malware Description:
Antivirus Vista 2010 is apparently a new implementation of computer criminals’ brain force. This program can neither find nor exterminate PC threats. Nonetheless, it will persistently keep telling you that it detected a variety of parasites on your machine that have to be removed unless you don’t mind getting your system ruined. The functioning of Antivirus Vista 2010 rogue anti-spyware is integrally based on making use of software vulnerabilities employing trojan viruses to spot them. So from the start, Antivirus Vista 2010 comes into your system as a multitude of trojan horses that shape up the trial version of this scam software. This fraud tool will force your system to run some malignant executables which invoke a whole sequence of annoying events. There will appear some pseudo scanners that supposedly reflect a virus check procedure taking place inside your OS. Each one of these scanners ends with a report that states you have too many infections on your PC to stay idle and do nothing about it. These ads will be supplemented by a bunch of mendacious popup alerts whose mission is to confirm the poor protection status of your system. In the long run, Antivirus Vista 2010 will keep on hinting you that you need to buy its commercial copy to get those security issues resolved in no time. But you should be sober when receiving that sort of recommendations from Antivirus Vista 2010. It will not help you get your system cleaned from anything unsafe. Your best choice to make in terms of treating Antivirus Vista 2010 scareware is to remove it from your computer for good. Before following our removal tips below, please make sure you enter Safe Mode by pressing F8 key repeatedly when your PC is starting.