New Self-Cloning Rogue
A new rogue that will randomly change names and include a reference to the current operating system has emerged.
The rogue will change to different names depending on the user's OS. On Windows XP we have encountered the following:
- Antivirus XP 2010
- XP Antispyware 2010
- XP Antivirus PRO 2010
- XP Antivirus PRO
- XP Guardian 2010
- XP Guardian
- XP Internet Security 2010
- XP Internet Security
On Windows Vista we have seen it use the following names:
- Antivirus Vista 2010
- Vista Antispyware 2010
- Vista Antivirus PRO
- Vista Guardian 2010
- Vista Guardian
- Vista Internet Security 2010
- Vista Internet Security
On Windows 7 we have seen it using the following names:
- Antivirus Win7 2010
- Win7 Antispyware 2010
- Win7 Antivirus PRO 2010
- Win7 Antivirus PRO
- Win7 Guardian 2010
- Win7 Internet Security 2010
- Win7 Internet Security
Once installed, the rogue will detect several false infections and it will require a license to remove these infections. To further scare the user, fake attacks on the system are also shown.
Ad-Aware detects this rogue as Win32.FraudTool.XPAntispyware2010.
