The Malware Dictionary

The Latest Computer Adware, Spyware, and Virus Info!

Rogue AntiSpyware Programs – System Security

Tags: , , , , , , , , , ,

System Security Virus Pop-Up Display

System Security Virus Pop-Up Display

There are a number of rogue antispyware and antivirus programs on the Internet now a days. One of the particularly nasty ones is the System Security virus. If your computer gets infected by System Security, it’s going to make your operating system unstable and will result in additional malware being installed on your computer.

What Does System Security Spyware Do?

Once your computer gets infected by the System Security Virus the malware will:

-         Get past your antivirus and antispyware software. Some of the latest versions of these programs will catch the attempted infection, but not all of them. If it does get past them, it will disable the well-known antivirus program control panels.

-         Will block opening your registry editor, task manager, and accessing the DOS command prompt.

-         Try to prevent you from installing new anti-virus programs on your computer to remove the malware.

-         Attempt to Disable online virus scans to keep you from using that medium to fix or clean System Security.

System Security Virus Symptoms

System security will display the “Security System Firewall Alert” on your computer whenever you are online. It will also generate a randomly named executable in the “Documents and Settings\All Users\Application Data\random numbers\random numbers .exe” directory. When you restart the computer it will prevent you from accessing the registry during reboot to clean the virus.

Removing System Security 2009 Manually

You’ll likely not have any luck removing System Security automatically with your anti-virus program. Definitely try that route first. If it fails, then you can manually remove the infection, but please seek advise of a professional if you are not experienced at registry modifications. First, reboot your computer in Windows Safe mode by rapidly depressing the “F8″ keyboard function key during the rebooting process. Then, delete the following files from your computer:

%\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins %\Documents and Settings%\All Users\Application Data\00308937\00308937.exe %\Documents and Settings%\All Users\Application Data\00308937\config.udb %UserProfile%\Desktop\System Security 2009.lnk

%UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk

%UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Then, remove the following entries from your computer’s registry.

HKEY_LOCAL_MACHINE\Software\00308937 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “00308937″ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009

After you’re done, reboot your computer normally and attempt to run your anti-virus program to check for additional infections on your computer.

How Does SmitFraudFix Work?

Tags: , , , , , ,

We’ve all heard of or been infected by computer spyware. One freeware application that you can find on the Internet to help remove spyware is SmitFraudFix. The tool is a freeware application that has an extensive database of spyware parasites loaded into the program and is specialized for the removal of several rogue or fake anti-spyware programs such as AdwarePunisher, AdwareSheriff, and Spyware Strike. It is not designed to remove most computer worms, trojan viruses, or rootkits.

SmitFraud Fix Description

As stated, SmitFraudFix was created in order to help remove some of the fake anti-spyware programs that have been infecting computer users throughout the Internet. The tool is free, and it requires you to restart your computer in Windows safe mode before scanning and cleaning your computer. Due to the nature of how the rogue anti-spyware programs are bundled with a number of other Trojan viruses and malware payload, its normally best to run SmitFraudFix at least twice to make sure it has the removed the computer malware that it was supposed to.

SmitFraud Fix Issues

SmitFraudFix is good at what it was designed to do…attack and remove anti-spyware programs. It is not a tool for the computer newby though. Most of the commands have to be run via the DOS command prompt (tell your Mom or teacher that you’re not a hacker just because you know how to open the DOS prompt!)  and may prove difficult to use for the non-power user. If you are running an older version of the Windows Operating System, it may have trouble supporting SmitFraudFix and some reports of the occasional “Blue Screen of Death” have been received for the older boxes running the program (that were also pretty infected btw!). The other issue with the software is that there is no “real-time” anti-spyware protection built into the software so you have no active defense against infection if this is your only anti-malware program on your computer. It is good at removing the rogue anti-spyware programs after infection.

How Do You Use SmitFraudFix?

You can download SmitFraudFix from “Bleeping Computer” here: SmitFraudFix Download Link. First, read about tips on keeping computer spyware off of your computer before proceeding.

Then, double click the SmitFraudFix.exe file to start the program once you have rebooted your computer in Windows Safe mode.

- Select the number 1 followed by the “enter” key to make a new scanning report. This will be exported to your root drive (normally c:\ on a Windows computer) that is named “rapport.txt”.

- Enter 2 followed by the “Enter” key and SmitFraudFix will start searching for and deleting infected files on your computer.

- The program will ask you when done with the scan and delete operation if you want to clean your computer’s registry. Choose the “Y” key followed by “enter”

- The program will reboot your computer when done running. You’ll be able to access the scanninga nd cleaning log after you run the full report on your computer.

SmitFraud Fix Conclusions

SmitFraudFix is good at what it was designed to do…remove rogue anti-spyware programs from your computer. It is not a substitute for real-time or commercial anti-spyware protection, but is a good tool to keep in yoru anti-malware toolbox.

What is a Keylogger?

Tags: , , , , , , ,

Keyloggers are the specialized computer Spyware programs, which are capable of recording everything you type on the computer’s keyboard. This malicious software will enable the creator to retrieve this information later and can help them in consequently discovering your passwords, account numbers, user names and other confidential and sensitive data. The creator can gather the entire knowledge of the user’s web surfing habits and can even read the personal emails. They are extremely powerful software applications that can lead to identity theft.

The level of sophistication of the Keyloggers has greatly increased in the recent times. They even have the capability to record the keystrokes even if you are not logged in. These programs will silently run in the background undetectably. They are capable spying on the active applications by taking their text snapshots. The latest Keyloggers can be turned on even remotely.

How Does Your Computer Gets Infected by KeyLoggers?

Downloading content from Internet is the major way of getting a Keylogger. The files you download from internet may have a keylogger or any other variety of malicious Spyware or other computer malware. These can also enter your system as attachments to an e-mail.

Keyloggers can be used for many ethical, legal and beneficial actions too. The keylogger programs can be used by the parents for keeping an eye on the online activities of kids. This can greatly help the parents in protecting the children from offensive content as well as predators.

You must somehow avoid being infected from this computer Spyware, as it is extremely malicious. You may not know even if your system is infected. You can avoid the attack of this spyware to a great extend by downloading music, software and other files from the trusted and reputed sites. You must also keep away from the email attachments from unknown senders. You must make its sure that the attachments are clean and safe before opening them even though they are from known sources. Installing a top quality anti spyware program can be a great thing to do in order to protect your system from Keyloggers and other malicious spyware. Anyhow, keeping your PC safe from spyware is important to keep you private data safe and avoiding identity theft.

How Does Spyware Work?

Tags: , , , , , , ,

Computer Spyware infects a computer without the user’s permission. Spyware can be very dangerous to your personal privacy and can serve as a gateway to additional computer malware infection on your computer. Spyware by its nature does not self-replicate, but is used to exploit holes in the security on your computer. Recent trends have seen a significant rise in fake anti-spyware programs on the Internet that have been used to trick users into downloading additional spyware and malware to their computers.

Types of Computer Spyware

Four of the common types of computer spyware are: Adware, Browser Hijackers, Keyboard Loggers, and Modem Hijackers.

Adware

Not all Adware is bad. There is a growing population of Adware, however, that collect and send information to remote servers from your computer. This information includes web surfing history, advertisement clicks, etc. The rogue adware variants are also known to be bundled with other computer malware that could be installed on your computer.

Browser Hijack
A large amount of spyware will attempt to take over your web browser and modify the hosts file that determines what uniform resource locator is used to correlate to major search engine websites such as Yahoo, Bing, and Google. They will also force your browser to open rogue websites that pretend to be security centers of major providers online. The hijacked websites will then download computer malware to your computer and result in further infection.

Keyboard Logger
Keyboard loggers are one of the most dangerous variants of Spyware. Their sole purpose is to steal your private information and send it to a hacker for further use. This can be anything from your bank records, to email, to any other site that requires a login and password.

Modem Hijackers

Less prevalent today in the age of broadband connections, Modem Hijackers are still dangerous to computer users who have to use dial-up to connect to the Internet. A modem Hijacker will call a phone number that has a high per-minute charge and will run your phone bill up.

Spyware Protection – 5 Steps to Protecting Your Computer Against Malware

Tags: , , , , , , , , , , , , , ,

Computer Malware and Spyware can negatively impact your computer’s performance and put your personal security at risk! With each passing month, there is more and more Spyware that is released on the Internet, potentially placing your personal information and computer at risk.  Spyware does this through:

-         Display of a Large Number of Pop-Up Advertisements

-         Decreasing the Speed of Your Computer

-         Crashing Your Computer

-         Invading Your Privacy

-         Stealing Your Private Information

Spyware Protection Steps

Spyware Protection Step #1 – Using a Firewall

Most computers come with a built-in Firewall today. Many users, however, are either 1 – Scared of using a firewall or 2 – Become annoyed at firewall warnings of spyware or malware attack against their computer that are false alarms and turn it off. Installation and use of a firewall, however, is critical in guarding your computer against spyware and Trojan viruses that attempt to gain control of your computer for use by hackers! Windows XP and Vista come with a Firewall already built in to the Operating System in order to help you guard against Spyware targeted at Microsoft produced OS’s!

Spyware Protection Step #2 – Update Anti-Spyware Software and Spyware Removal Tools

Keeping Windows updated on a regular basis is another key to keeping your computer free of computer spyware and malware! New spyware and malware is released every day and if you delay updating Windows, you could put yourself at greater risk of spyware infection!

Spyware Protection Step #3 – Adjust Web Browser Security Settings

If you have a choice in what Web Browser to use, consider the freely available Google Chrome or Mozilla Firefox web browsers. Each comes with additional security than is found in Internet Explorer and can keep your computer from being attacked by Microsoft specific spyware and adware. If you do use Internet Explorer, adjusting your security settings for the Web Browser to an Internet Zone level of Medium or higher will help prevent your computer from being infected with malware. This is the default setting starting with computers that run Windows XP Service Pack 2. To check and change your current Internet Explorer settings, do the following:

1 – Open Internet Explorer. Select “Tools->Internet Options>”

2 – Choose the “Security” tab and then toggle the security setting to medium or higher.

Spyware Protection Step #4 – Download and Install Antispyware Software

There are a number of Antispyware software packages available on the market. Windows Defender comes bundled with Windows Vista and is free to download for Windows XP, SP2. Norton and Symantec are two of the other well-known anti-virus and anti-spyware software companies on the market. Whatever software package you choose, however, check to make sure it is legitimate by reading multiple reviews on the software to avoid being tricked into downloading fake anti-spyware, spyware such as Barracuda Spyware!

Spyware Protection Step #5 – Be Careful Surfing and Downloading Files

Be judicious in your web surfing habits! Here are some tips to think about when surfing the Internet and downloading files or software:

-         Don’t download programs or files from websites you do not trust. If you haven’t heard of the company before, Google the software or company name to see if you see any negative complaints first.

-         Read the EULA (end user license agreement). A lot of Adware and Spyware will tell you what they are going to do in the fine print…

-         Do not choose “Ok” or “Agree” to close out of a window online. “Alt + F4” or the big “X” in the corner of the browser window will help prevent some threats from infecting your computer.

-         Be very, very leery of File sharing and free movie sites. One of the most common ways hackers get backdoors installed on work and home computers is through infected multimedia files. Don’t let them get to your computer!

These steps are not all encompassing, but by following them; you will be well on your way to being protected against computer spyware and malware.

© 2009 The Malware Dictionary. All Rights Reserved.

This blog is powered by Wordpress and Magatheme by Bryan Helmig.