Top Rogue Anti-Spyware Programs
June 01, 2006 file found under Rogue Anti-Spyware
For those who are not aware of rogue antispyware or can't tell the difference between a trustworthy anti-spyware and a rogue anti-spyware, here's a little quick explanation on the matter.
Rogue anti-spyware programs are security tools that use fake warnings only to trick the user into believing that their computer may be infected with spyware so they are convinced to purchase the full version of rogue program. Instead of providing a spyware solution it causes more harm than good. It may take control of your computer and start issuing more popups and changing your browser default settings.
Here is a list of popular rogue anti-spyware and security applications. (Note: This spyware list will change as new spyware is detected so you will be up-to-date on what to avoid.)
SpywareQuake (removal instructions)
Spyware Quake is a trojan that displays an icon in the system tray. SpywareQuake looks like a legitimate application for removal of spyware, but it's installed by a trojan in an attempt to trick you into buying it. The trojan is able to change the Internet Explorer default home page and redirect the web browser to malicious web sites. SpywareQuake will also pop-up fake alerts that resemble system alerts in another attempt to get you to buy it.
SpyFalcon (removal instructions)
SpyFalcon may appear as an icon in your Windows tray and show a message that says your PC is infected with malware. SpyFalcon may then suggest you download and install software to remove this malware. If you follow its directions, you will download SpyFalcon, and once downloaded SpyFalcon may redirect your Internet Explorer home page and search results to a malicious website. SpyFalcon may also download and install other software without your permission. SpyFalcon may be distributed through bundles of trojans and other malware.
SpySheriff (removal instructions)
SpySheriff is a system hijacker that secretly installs to victim PCs. SpySheriff causes the desktop to change and display a fake warning message that tricks users into installing the antispyware software (SpySheriff).
SpyAxe (removal instructions)
SpyAxe is a trojan, that shows one or two icons in the system tray and displays a message saying that the system is infected with spyware and asking the user to download and install an anti-spyware program, which is actually a malicious software program. Once the user clicks on such message, the trojan opens the anti-spyware's official web site. It may also try to download the application automatically. SpyAxe may also change the desktop background.
PestTrap (removal instructions)
Pest Trap may note harmless software as threats in an attempt to have you purchase Pest Trap's full version to remove these harmless programs. PestTrap may also automatically launch at your computer's startup and scan your computer. Pest Trap may be knowingly downloaded and installed by users, and it may be installed without permission through browser exploits.
WinFixer (removal instructions)
WinFixer is a commercial product that pretends to be a legitimate system tool. WinFixer is actually spyware, which continuously displays annoying false reports of purportedly detected system problems, errors and parasite threats. This may trick the user into thinking that the program is not a security threat and make the user purchase a version of WinFixer.
BraveSentry (removal instructions)
BraveSentry hijacks the web browser and it is known to issue fake warnings on your computer in order to manipulate you into buying its full commercial version. It can also be installed from the BraveSentry website and has been forced onto the computer without EULA and users knownledge of installation. It does not actually detect parasites, but targets harmless system and software objects as threats in attempt to trick the user into purchasing the full version of Brave Sentry. BraveSentry is related to SpySheriff and Spware-no.
WinHound (removal instructions)
WinHound is a trojan, which silently installs itself to vulnerable computers by exploiting certain system or web browser security flaws. Once executed, WinHound installs several other dangerous threats, changes the Internet Explorer default home page and the desktop wallpaper. The new wallpaper issues fake warnings on your computer in order to make the user to buy it's version. WinHound can use a rootkit to cloak its files, running processes and other related objects.
SpywareStrike (removal instructions)
SpywareStrike is a variant of SpyAxe. SpywareStrike shows a message, which says that the compromised PC is infected with dangerous malware spywares and asks the user to download and install an anti-malware application, which actually is SpywareStrike, corrupt illegaly distributed malware remover. Once the user clicks on such message, the trojan opens the official web site of SpywareStrike. It may also try to download the software. The trojan is able to change the Internet Explorer default home page and send the web browser to malicious web sites. SpywareStrike automatically runs on every Windows startup.
RazeSpyware (removal instructions)
RazeSpyware claims to clean spyware after the product is registered when in reality it only searches for known threats (which signatures are included into the program's spyware definitions database) and does not check all the files, registry entries and running processes. Upon execution the Trojan adds a HTML page in %windir% as index.html (also detected as Raze Trojan). The HTML page is then installed as desktop wallpaper that displays a fake warning that system is infected with spyware, keyloggers and adult content. It prompts user to download Raze AntiSpyware to protect themselves against these threats.
Attention: SpyHunter automatic detection tool is solely to detect spyware, malware and other infections on your PC. You have the ability to remove spyware and other infections with the purchase of SpyHunter's spyware removal tool.
Posted by Casey at June 1, 2006 09:45 AM
