Posted by Marcin on April 24th, 2008
A new rogue by the name of IE AntiVirus has been discovered.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for IE AntiVirus
Marcin Kleczynski
Posted by Marcin on April 14th, 2008
A new rogue by the name of Malware Bell has been discovered. It is installed via the IE Defender trojan. In this specific case, the file most responsible for pushing the software is ps16sys.dll, which is located in the Windows directory..

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for Malware Bell
Marcin Kleczynski
Posted by Marcin on March 9th, 2008
While Bruce was doing his usual research last night, he discovered this new one - PCAntiVirusPro.

Here is the interface of the rogue application:

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for PCAntiVirusPro
Marcin Kleczynski
Posted by Marcin on March 5th, 2008
Bruce Harrison found a new rogue application today called RealAV (also called Real Antivirus). This program displays false positives in hopes that you purchase their decently (sarcasm of course) priced $89.95 software. They must be out of their minds.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for RealAV
Marcin Kleczynski
Posted by Marcin on March 1st, 2008
Bruce and Mike have been hard at work updating the Malwarebytes’ Anti-Malware database. They have discovered three more rogue applications and added them to the database. Malwarebytes’ Anti-Malware removes each of these rogues.



If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for Easy Spyware Cleaner
Removal instructions for InfeStop
Removal instructions for Spy-Rid
Marcin Kleczynski
Posted by Marcin on February 29th, 2008
Two more rogues were spotted by Bruce this afternoon. Details below.

Here are the interfaces of the actual rogue applications:


If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for The LastDefender
Removal instructions for WinIFixer
Marcin Kleczynski
Posted by Marcin on February 28th, 2008
Just found this last night.

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for SpyWatchE
Marcin Kleczynski
Posted by Marcin on February 27th, 2008
I received an e-mail from a user asking me to blog about this rogue and figured I might as well. I had Bruce, our database guy, visit the SpySnipe website and test out the application. He did a lot more research and it is safe to say we were we surprised! This rogue was installed via multiple trojans and literally spewed popups all over our test machines. Stay away from this rogue application.

Here is the interface of the rogue application:

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for SpySnipe
Marcin Kleczynski
Posted by Marcin on February 27th, 2008
As you have probably guessed by now OnlineGuard does nothing to help guard your Internet. This is a rogue anti-spyware application and as always we have provided removal instructions below.

Here is the interface of the rogue application:

If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for OnlineGuard
Marcin Kleczynski
Posted by Marcin on February 21st, 2008
Same types of rogue applications as reported in the previous post. These are installed when a user clicks a popup alert as shown below. Here are some alerts that the user may be presented with:


Here are the interfaces of the actual rogue applications:


If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for Antispyboss
Removal instructions for MalwareAlarm
Marcin Kleczynski
Recent Comments