MalwareCleaner might at the first look not look like a rogue and it offers a “free of charge 60 day trial period”. However, once it is installed, the user will quickly notice that this really not is the case. During the first scan it will find traces of malware on the machine.
Antivirus09 (or Antivirus’09) is a new rogue that follows the normal rogue procedure. It is distributed through a web page that presents the user with a fake online scanner.
System Protector is yet another rogue anti-virus program. It comes with the normal pretty homepage with some fake press reviews, etc.
The recent extensive media coverage of the Conficker worm (see previous blog post) has also attracted the creators of rogue anti-malware software. Pages that claim to show how to get rid of this pest have been hijacked by fake scanners that promote rogue software. Another tactic has been to create pages that offer a product, claiming it will remove Conficker. An example is shown below.
Today a new rogue was discovered called Spyware Fighter. It is following the normal patterns with false detections and trying to scare the user into buying a license to clean them.
Further it has the classic user friendly home page available under a few similar named domains.
SpywareFighter was added to detection in release 0146.0017.
0146.0017 is now available, new definition file for Ad-Aware Anniversary Edition.
New definitions:
====================
PrivacyComponents
SpywareFighter
Updated definitions:
====================
InternetAntivirusPro
XLG Security Center
MD5 checksum for core.aawdef is 3affd2aa71307b1bfe8d620271355bbd
0146.0016 is now available, new definition file for Ad-Aware Anniversary Edition.
New definitions:
====================
Adware.Advision
Win32.Flooder.ArpPack
Win32.Flooder.Bomber
Win32.Flooder.ICQ
Win32.Flooder.Misoka
Win32.Flooder.MPCLagger
Win32.Flooder.Teamspeak
Win32.Monitor.EZRecKb
Win32.Monitor.IMonitorPC
Win32.Monitor.PCPolice
Updated definitions:
====================
404search
ABetterInternet.Aurora
AdRotator
Adware.AdAgent
