Tag: virus

  • The Great Lizamoon SQL Injection Attack – March-April 2011

    Well – Friday things started getting interesting on tech news sites. Most sites were running phony April fools stories and a few including websense was running with a major attack going on against many SQL based websites. Details were sketchy – people were told to look for ur.php files in their web directory (which isn’t exactly a good test to see if your site has been infected by this SQL injection…) “<script src=http://lizamoon.com/ur.php”> is an example of the code that is inserted into sql databases and what it basically does is force visitors to visit a scareware site where malware may be installed onto their computer that claims they have a virus…. (how many of those have we seen in the last 5-10 years?)

    One of my annoyances with tech news (and especially virus news) coverage is that when a story gets big enough to be covered by the big media, they never do it justice. I want information. What is this attacking? What programs are vulnerable, is there a pattern?

    (more…)

  • Prepare for the April Fools Spyware Flood

    I received a message from some at superantispyware in the last day or two that is a well timed and good heads up. Every year there is a surge in spyware, malware and rogue activity around April Fools Day (April 1st). It’s important to be aware and raise our skepticism a bit this time of year… I’m reprinting here…

    (more…)

  • How to Remove Live Enterprise Suite | Live Enterprise Suite Removal Guide

    Live Enterprise Suite is yet another rogue security application. This is a successor to the frustrating Internet Antivirus Pro and Ghost Antivirus rogues. Like many of these security rogues they are pushed through malware and aggressive advertising. This may be a website that when visited a screen pops up that appears to be doing a scan on your computer. However, everyone sees the same video when they visit the site, so you may see the same message whether you’re browsing with windows, apple mac or linux. Unfortunately, this trick is effective and many will click on the link they provide which installs the software on the local machine. Read on for how to remove live enterprise suite.

    (more…)

  • How to Remove APCSafe | APCSafe Removal Guide

    APCSafe is another of the recent variations on the Wini family of rogue antivirus applications. Like all the others it is pushed by trojan activity… this is typically a video site that claims to have a sought after video, but alas…. the video cannot be viewed unless you install a flashplayer update that they have on the site, or a video codec. These of course, aren’t really what they are, they are the payload of this rogue antivirus. Once it is installed it will run at boot, scan files and complain of many viruses on your system as well as security problems with your computer. None of these can be fixed without paying for the software, so it claims. This is a scam, so please read on for how to remove apcsafe.

    (more…)

  • How to Remove PCSecure | PCSecure Removal Guide

    PCSecure is a recent rogue antivirus from the notorious and prolific wini family of rogue security software. It is typically promoted via trojan downloaders. Usually these will be on a website with a video that may be highly sought after. In order to see the video though you are told that you need to download a codec update or flash player update. This is where you get the infection that starts the nightmare of popups complaining of viruses on your system and multiple security problems on your pc. The real kicker is that they claim that the problems cannot be fixed unless you purchase their software. This is a scam and should be avoided. Read on for how to remove PCSecure.

    (more…)

  • How to Remove Desktop Security 2010 | Desktop Security 2010 Removal Guide

    Desktop Security 2010 is a rogue antivirus application. It is a successor to Total PC Defender and installs on your pc without permission through the use of malware. Once on your system it will create numerous files that it then finds during scheduled scans and it claims these files are virus infected. It will scan at windows startup and claim these files and some legitimate files are infected with viruses and the only way it can clean them is if you purchase the software. If the files listed are removed it can damage your system. Obviously, this is a scam just to get your money, read on for how to remove desktop security 2010.

    (more…)

  • How to Remove APCSecure | APCSecure Removal Guide

    APCSecure is yet another rogue antivirus application from the prolific and annoying wini family of rogues. This particular variant also comes with a rootkit called TDL3. Trojans are used to promote this rogue antivirus and you will likely find that it will create multiple empty files on your computer that it will then find during scans and claim that they are all virus infected files. Like most all rogues it will also claim that your only hope to fix the security problems on your pc is to purchase their software. This is a scam, do not let them separate you from your hard earned money. Read on for how to remove apcsecure.

    (more…)

  • How to Remove ProtectSoldier | ProtectSoldier Removal Guide

    ProtectSoldier followed right on the heels of ProtectDefender as another entry of rogue antivirus software in the notorious and prolific wini family of rogues. Like all of them it is installed via trojan horses and pushed via flash player updates and video codec downloads. Once installed on a system it will create numerous files to scan and then later claim are virus infected. Further it will run each startup and scan your computer claiming multiple security problems with your pc. It is at this point that it will tell you that in order to fix all the problems on your computer you must purchase this software. This is a scam…. read on for how to remove protectsoldier.

    (more…)

  • How to Remove ProtectDefender | ProtectDefender Removal Guide

    ProtectDefender is yet another recent rogue antivirus application from the wini family. As with many of the other entrants from this family, it is installed through the use of bogus flash updates and purported video codec downloads. Typically a computer user will run across a site that claims to host a well sought after video and when they arrive at the page there is a claim that an extra video codec or flash player update in order to view the video. Once installed on the system it will create numerous files in c:\Windows and c:\windows\system32. These files are harmless, but it will later claim that these files are infected with viruses and other malware. It will also run at windows startup and claim that the only way to fix the problems on your system is to purchase the software. This is essentially a scam…. read on for how to remove protectdefender.

    (more…)

  • How to Remove Armor Defender | Armor Defender Removal Guide

    Armor Defender is the latest rogue antivirus from the wini family of rogues. It takes a bit of a departure from the recent look of their rogues. However, like all of it’s other cousins in the fact that it is promoted by trojan, malware and they masquerade as flash updates that would be required to view a popular online video, but the payload is not a flash update, instead it’s the beginning of quite a bit of frustration as the computer starts to show many popups complaining of viruses on the machine, popups complaining of security deficiencies with the system and as if we couldn’t guess….. it can’t be fixed unless you purchase. Read on for how to remove Armor Defender.

    (more…)