New Rogue Uses Fake PC Magazine Review

Yesterday, the good folks at BleepingComputer posted removal instructions for a rogue antivirus (please see, Internet Plague – Rogue Antivirus) that is demonstrating a new behavior…

Quote: “Anti-virus-1 is a new rogue anti-spyware program from the same family as Antivirus 2010 and Antivirus 360. This program is promoted primarily through two methods. The first is through the use of advertisements that pretend to be online anti-malware scanners. These advertisements go through what appears to be a scan of your machine and then when finished, state that your computer is infected and that you should download Anti-virus-1 to protect yourself.

Remember, though, that this is just an advertisement and it has no way of knowing what is running on your computer. The second method that is used to promote this rogue is through the use of Trojans. When certain Trojans are installed on your computer they will display security alerts stating that your computer is infected or that you have some other security risk. When you click on these alerts, it will download and install Anti-virus-1 onto your computer…”

But that is not the new part, the new behavior adds entries to your HOSTS file so that if you go to any of a number of technology sites, including pcmag.com, you are instead brought to their site and are shown the malware author’s content. This content includes a doctored PCMag review of their fake anti-malware product.

For more on the story, click here.
And for removal instructions, click here.

A big tip of my geek hat to BleepingComputer.

Copyright 2007-9 © Tech Paul. All rights reserved. post to jaanix

Share this post :

[ALERT] Call Immediately for Details, E-Lotto Promotions

For those readers who don’t believe that I win $2.5 million every couple of days…

PRIZE/PROMOTION AWARD DEPT.
LOTTO NL.
CATEGORY “A” WINNER
Ref No: TIS-404/8231
Batch Number: NL 80 OS 94144448
Amount Won: $2,500,000.00
Dear Internet User
We are pleased to inform you of the result of the Lotto NL. Internet Promotional Draws. All email addresses entered for this promotional draws were randomly inputted from an internet resource database using the Synchronized Random Selection System (SRSS).
Your email address was selected in the Category “A” with Reference Number TIS-404/8231, and this qualifies you to be the recipient of the grand prize award sum of $2,500,000 (Two million, five hundred thousand dollars). The payout of this cash prize to you will be subject to the final validations and satisfactory report that you are the bonafide owner of the winning email address.
In line with the governing rules of claim, you are required to establish contact with your designated claims agent via email or telephone with the particulars below:
Name: Mr. David Berman
Phone: +31-647-283-937
Email: da_berman01@live.nl
You are advised to call the Claims agent for confirmation or provide the following information for processing the payment of your cash award.
DATA PROFILE
Names:
Telephone/Fax number:
Nationality:
Age:
Occupation:
Winning Reference Number:
Failure to complete the claims of your cash prize after 14 days of this notice will result in the revision of award. Hence, you should commence your claims process immediately, by contacting the claims agent (Mr. David Berman) who would be guiding you through the Claims process.
Congratulations on your Winning Prize and we look forward to completing your payout soon.
Yours Faithfully,
Emily Jean Barry
Lottery Co-ordinator

… You guys are seeing the pattern here, right?

Copyright 2007-9 © Tech Paul. All rights reserved. post to jaanix

Share this post :