There’s a rumor going around and a lot of unconfirmed information that a facebook application known as fan check is actually a virus. I’m seeing several claims that if someone becomes a fan of this facebook app (which the page claims is undergoing changes and currently unavailable)… well if someone becomes a fan in the meantime their friends will all be notified of the app, password on the account changed, etc. I’m a bit skeptical at this point because EVERYTHING I see seems 3rd party and I don’t see anyone claiming that THEIR account was compromised. What I DO know is that some of the top search results are known malware attack sites. For instance the second result (which was the top result a few hours ago….
Category: antivirus
-
How to Remove Nortel Antivirus | NortelAntivirus Removal
Nortel Antivirus is another of the recent rogue security applications making the rounds. One thing that makes this rogue antivirus application unique is it’s attempt to play on the trust of the Norton Antivirus branding and icons by presenting a similar themed antivirus package and name that really doesn’t measure up. It installs by means of trojan or other vulnerability exploits and claims (as they all do) a laundry list of problems that can be fixed on your computer. Infected files, etc. really aren’t infected and as usual they are after your payment for this scareware.
So let’s take a look at how to remove nortel antivirus.
-
How to Remove BlockDefense | Block Defense Removal
Blockdefense is yet another of these wolves in sheep clothing that make some computer users lives so miserable these days. It is from the same group of malware that includes Trustninja, save soldier, and savedefense. These are part of a group of rogue antivirus programs that are part of the WinGuard group of related malware.
Like so many of these it encourages users to buy based on trumped up fears about files that it claims are threats. (Which it created on the disk.) So, here is how you go about removal of blockdefense…
-
How to Remove SystemCop | System Cop Removal
Yes, it’s another rogue antivirus package that causes all sorts of headaches, popups, false warnings and yes, you have to pay to solve the problems it claims to find. Essentially the software, when installed creates lot’s of files that on scanning your system it “discovers” and claims they are a threat. It seems like everyday there is another of these programs that is a rogue security or rogue antivirus and I guess the flavor of the day is SystemCop. I have seen reports that this rogue application is in the same family as BlockDefense, SaveDefense, Trust Ninja, WiniBlueSoft, WiniFighter.
-
js/exploit packed.c.gen
I see users of McAfee are seeing a lot of complaints by their antivirus about this js/exploit packed.c.gen. One user is reporting that the weather underground site is raising a flag about this virus. I’m seeing indications that this may be a false positive.
-
How to Remove Antivirus 360
This should not be confused with Norton 360 which is a legitimate antivirus program (although if you need help removing Norton 360 to reinstall it or another antivirus program you may want to visit my antivirus removal tool list.)
What we are talking about this time is a rogue security application known as Antivirus 360. Like many other rogue security applications (wolves in sheeps clothing as I used to call them), Antivirus 360 may have installed itself on your system by way of a security flaw in your browser or some other less than admirable method. Such avenues include aggressive popup ad advertising after a system is infecting with a trojan such as vundo. It seems to be the successor to the Antivirus 2009 rogue application.
-
So who is behind Windows Police Pro Virus / Rogue Security Software?
As I’ve seen the continuing FLOOD of searches for some way to Remove Windows Police Pro, I’ve been starting to wonder at the who is behind this particular piece of junk software. These programs aren’t written by your average ordinary virus writer, there is really too much spit and polish on these and the end result is a racket which resembles a mob shakedown along the lines of “it’d be shame if anything happened to your important data”….. I’m intrigued by some that are speculating that there’s a connection to the Total Security 2009 package. The reason they’re saying that is some of the top sites for removal of Windows Police Pro are actually shilling ANOTHER rogue security program Total Security 2009. If that isn’t moving from the frying pan to the fire. They also suggest a connection with the XP Police Antivirus (which was yet ANOTHER of these wolves in sheeps clothing.)
-
Remove Windows Police Pro
I’m seeing a lot of searches for how to remove Windows Police Pro this evening. It looks like it’s ALSO the latest flavor of the minute in the rogue security application crowd (take a look at remove Green AV for another rogue). As stated before… my usual path for removing a rogue antivirus or antispyware application is the same as any other malware, try to get other malware removal software on the system (such as malware bytes antimalware or super antispyware, AVG, spybot etc.) and get them running scans to eliminate it. (Virus Removal Toolkit for links.) (Make sure to get updates for the software first.) If that approach doesn’t get you anywhere then it’s time to find the name of the program file that’s running. It appears that with Windows police Pro, to remove it from the running processes you need to kill of the process called one of the following:
WindowsPolice.exe
WindowsPolicepro.exe
WPolice.exe. You may need to reboot into safe mode, then you can rename (or just delete) the offending program executable…. here’s a suggestion for you.
-
ClamAV 0.94.1 to phone home
The release candidate for version 0.94.1 of clam antivirus and they are eager for people to get out and test it. There is a new feature in this release called “malware statistics gathering” that will pass along observed malware information back to clamav.net – they hope to be posting statistics on their site. In order to enable this feature it will need to be switched on in your freshclam.conf file.