Yet another rogue anti-spyware application has been released. This time it's called WiniBlueSoft.
HomeAntivirus 2009 uses many of the normal rogue behaviors. First and foremost, it puts plenty of garbage files on the system that it then detects as malware.
MalwareCleaner might at the first look not look like a rogue and it offers a “free of charge 60 day trial period”. However, once it is installed, the user will quickly notice that this really not is the case. During the first scan it will find traces of malware on the machine.
PAntispyware09 is a new rogue anti-spyware application and a clone of MsAntispyware2009. It will give exaggerated threat reports on the compromised computer, then ask the user to purchase a registered version to remove threats which do not exist.
Antivirus09 (or Antivirus’09) is a new rogue that follows the normal rogue procedure. It is distributed through a web page that presents the user with a fake online scanner.
System Protector is yet another rogue anti-virus program. It comes with the normal pretty homepage with some fake press reviews, etc.
The recent extensive media coverage of the Conficker worm (see previous blog post) has also attracted the creators of rogue anti-malware software. Pages that claim to show how to get rid of this pest have been hijacked by fake scanners that promote rogue software. Another tactic has been to create pages that offer a product, claiming it will remove Conficker. An example is shown below.
Antispyware Pro 2009 is a new rogue anti-spyware application. It will give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove threats which don't exist.
Today a new rogue was discovered called Spyware Fighter. It is following the normal patterns with false detections and trying to scare the user into buying a license to clean them.
Further it has the classic user friendly home page available under a few similar named domains.
SpywareFighter was added to detection in release 0146.0017.
Some new rogue anti-virus programs to be aware of...First out is XPVirusProtection with a standard looking website.
Antispyware3000 is a typical rogue. It shows a lot of false positives for files that do not even exists on the drive. However for some reason their full scan does not show these hits.
XP Police Antivirus is a new rogue anti-spyware application. It will give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove threats which doesn't exist.
