Symptoms: Homepage hijacked and you got redirect to guardupdate.com, startupguarduptodate.com, guarduptodate.com. Many more popups. Yelloe triangle pops up in the bottom of the task bar flashing and saying that your PC have infected. Print out these instructions as we will need to close every window that is open later in the fix. Download HijackThis and
Microsoft will release a patch against this problem in June, but even after that there are likely to be other attacks using other exploits. So let’s think a bit beyond the next couple of days on how to defend your network. User education is of course key, but likely insufficient. Attacks like that will use
Internet Storm Center reported about a new Word vulnerability being used. Exploit, using the vulnerability, has been sent as email attachment to specific individuals. The exploit functioned as a dropper, extracting a trojan byte-for-byte from the host file when executed. After extracting and launching the trojan, the exploit then overwrote the original Word document with
Spyware Sheriff is an rogue antispyware application that uses Trojans and other malware into tricking or scaring you into purchasing it. If you are infected with this malware, your Internet Explorer home page will be reset to about:blank and display a fake Windows Security Center alert stating that you are possibly infected. When you click
Spyware Soft Stop is a rogue antispyware. Once installed this program will issue fake taskbar alerts, which look like Windows Security alerts, stating that you are infected with various viruses and advising you to click on the icon to remove them. For remove this program you should download following: Download HijackThis and save the file
SpywareSheriff, a new rogue antispyware application that is starting to infect a lot of users. This particular infection is harder to remove than other variants such as SpywareQuake and SpyFalcon. This is because it uses a lot of random names for the files. It is, though, easy to tell when you are infected with this
A new piece of ransomware, called Ransom.a by most AV vendors, has been spotted in the wild. Evidence received so far suggests that this Trojan can be found on P2P networks. The malware poses as a Windows Mobile application, despite that description it will only work on Win32. When the user is infected and reboots
Michal Zalewski has discovered a vulnerability in Internet Explorer, which potentially can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to an error in the processing of certain sequences of nested “object” HTML tags. This can be exploited to corrupt memory by tricking a user into visiting a
Look2Me adware operates in stealth and displays an excessive amount of pop-up advertisements. Most common are IE pop-up windows, but some pop-ups are tailored by shape and animation. Some of the advertisements push the user to install ErrorGuard or WinFixer
