Threats | MyAntiSpyware - Part 1983

MyAntiSpyware

Trojan Vundo/Virtumonde turns a good file into a Trojan-Dropper

Myantispyware team December 9, 2007 No Comment Trojan

VirusList posted about new variant Trojan Vundo/Virtumonde. Vundo Authors are now using file infection so Virtumonde checks which files run at Windows startup and tries to infect them. Effectively this means that Virtumonde turns the original host file into a Trojan-Dropper. Dropper code is prepended to the original host file, with a copy of Virtumonde

Read more »
How to remove webcry.com hijacker

Myantispyware team December 8, 2007 3 Comments Browser Hijacking, Tutorials - HowTo

Symptom: When you do any kind of search, the search results come up like normal, however when you click on a link under the results the page goes blank and you keep getting re-directed to webcry.com Download HijackThis and save the file to your desktop. Double click on the file for install. Download CCleaner. Double

Read more »
Found first Christmas malware

Myantispyware team December 4, 2007 2 Comments Malware

F-Secure reported about malware runs using fake Christmas Cards as the lure. Example: A Dear friend has sent you an ecard from http://www.123Greetings.com Your ecard will be available with us the next 30 days. … To view your card,CLICK HERE … After run this ecard file x-mas.exe you got Zapchast mIRC-based backdoor. Read more: Merry

Read more »
Found some new fake codecs

Myantispyware team December 3, 2007 No Comment Spyware, Trojan

Sunbelt blog reported about some new fake codecs: codechq – codechq(dot)net Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codechq(dot)net/download/codechq(dot)dmg; Windows: codechq(dot)net/download/codechq(dot)exe. vplprocedure – vplprocedure(dot)com Sample binary vplprocedure(dot)com/download.php?id=10581 codectime – codectime(dot)com Pushes both Windows and Mac TrojanDNSChanger. Sample binaries: Mac: codectime(dot)com(dot)/download/codectime(dot)dmg; Windows: codectime(dot)com(dot)/download/codectime(dot)exe If you cannot remove fake codecs follow the steps in the

Read more »
How to remove shell.exe, spoolvs.exe trojan

Myantispyware team November 26, 2007 10 Comments Trojan, Tutorials - HowTo

Shell.exe and spoolvs.exe are components of trojan known as TROJ_RENOS.BX, Trojan.Win32.Qhost.abh , Trojan.Dropper, TR/Crypt.XDR.Gen, W32/Blocker-based!Maximus, Mal/TinyDL-T. Shell.exe and spoolvs.exe trojan symptoms: Start > Settings -> Control panel is missing Task bar icons informing you of an infection and taking you to legit looking security panel System pop ups and IE pop ups When you start

Read more »
How to remove savetheinformation.com and secirityonpage.com hijackers

Myantispyware team November 18, 2007 3 Comments Browser Hijacking, Malware removal, Tutorials - HowTo

Symptoms: IE pop-up windows, mostly to a site called www.savetheinformation.com but also to some other sites Yellow baloons from taskbar prompting to download antispyware software. Grey pop-ups, like error messages, also prompting to download antivirus/spyware software. 2 programs added to start menu program list: online security guide and live safety center when you open an

Read more »
October malware toplist by viruslist.com

Myantispyware team November 17, 2007 No Comment Malware, Spyware

# Greediest Trojan targeting banks: This month’s leader is a modification of Trojan-Spy.Win32.Banker.ezn, which targets 45 banks. This seems positively modest in comparison to last month’s leader, which set its sights on 134 banks simultaneously. # Greediest Trojan targeting payment systems: Backdoor.Win32.Xhaker.c is very equitable in its approach – it attacks three e-payment systems and

Read more »
How to remove Pcsecuritylab.com Hijacker

Myantispyware team November 17, 2007 1 Comment Browser Hijacking, Malware removal, Tutorials - HowTo

Pcsecuritylab.com is a browser hijacker. It may also change desktop wallpaper, shows message: Warning! SpyWare Threat Detected on Your PC! You will also periodically get fake security warning: Your Security and Privacy are at risk: Spyware has been detected. Click HERE to remove it. It automatically runs on every Windows startup. Pcsecuritylab.com is a very

Read more »
Some new fake codecs

Myantispyware team November 16, 2007 No Comment Trojan

Fake codec is actually a trojan download installer, It will change your home page to one a scam site. It produces unwanted popup to sell rough security software. These sites hosted codecs: gneprogram(dot)com ndcperformance(dot)com mzdsoftware(dot)com pkbsolution(dot)com zerocodec(dot)com Also zangcodec, playcodec. They Pushes Windows and Mac TrojanDNSChanger. Block them now! Use for that any hosts file

Read more »
How to remove IE Defender

Myantispyware team November 10, 2007 No Comment Malware removal, Rogue Anti Spyware, Tutorials - HowTo

IE Defender a rogue antispyware application that is starting to infect a lot of users. This particular infection is harder to remove. Also IE Defender installed in your Internet Explorer browser that hijacks searches you input into the Google and Yahoo search engines. When infected your Internet Explorer opens Google or Yahoo and make search

Read more »

Previous
1
2
…
1,982
1,983
1,984
…
1,994
1,995
Next