Today at Lavasoft, we discovered a number of new clones from the XpAntispyware2010 family of rogue security software. The unique aspect of this family is the ability to randomly change its name. Lavasoft Malware Labs found 36 different names on three operating systems (Windows XP, Windows Vista and Windows 7).

The links below lead to snapshots in the Lavasoft Rogue Gallery:

Windows XP

antispywarexp
antivirusxp
totalxpsecurity
xpdefender
xpdefenderpro
xpsecuritytool2010
xpsmartsecurity
xpsmartsecurity2010
xpantimalware
xpantimalware2010
xpsecurity
xpsecuritytool

Windows Vista

antispywarevista
antivirusvista
totalvistasecurity
vistaantimalware2010
vistaantimalware
vistadefender
vistadefenderpro
vistasecurity
vistasecuritytool2010
vistasecuritytool
vistasmartsecurity2010
vistasmartsecurity

Windows 7

antispywarewin7
antiviruswin7
totalwin7security
win7antimalware
win7antimalware2010
win7defender
win7defenderpro
win7security
win7securitytool
win7securitytool2010
win7smartsecurity
win7smartsecurity2010

Ad-Aware will detect all clones as Win32.FraudTool.XPAntispyware2010

Albin & Anders

Lavasoft Malware Labs