May 14

Malware Analysis:

While analyzing Windows Work Catalyst software we realized it is another sample we should write about. Since our blog is malware related, it’s clear that this program is definitely not a safe one. Windows Work Catalyst represents the fake software distribution industry. It lies to PC users about the condition their computers are in. First off, this application has a peculiar way of installing itself on one’s machine. Its downloader gets attached to a file people click on during web sessions. This may be some advertisement or software cracks loaded with the malicious trojan responsible for spreading this infection. When Windows Work Catalyst finally gets into a new computer, it changes the system so that some predefined bad processes keep getting executed. This will inevitably cause the ad activity which consists in displaying counterfeit scanners and many alerts that report issues with system stability and malware infestation.

May 12

Malware Analysis:

Windows Inspection Utility should not be perceived seriously. Would you like to know why? We are here to answer this question. Windows Inspection Utility is a counterfeit system optimization tool and concurrently a rogue antivirus program. It refers to the known group of malignant applications that repeat the same traits in each impersonation of this malcode. How can you tell Windows Inspection Utility on your machine? It’s a piece of cake. Annoying scanners, obnoxious pop-ups and probably even a hijacked browser – all of these are the common symptoms. Windows Inspection Utility tries to influence as many aspects of your PC life as possible, so it perforates into quite a few of those. By running fake scanners and issuing misleading ads, this program implies that you need to purchase its commercial version because, according to its information, only that way you can take care of the problems that had been reported.

May 10

Malware Analysis:

How did you run into Windows Supervision Center program? Was it due to the good old weird scenario when a PC utility literally attacks one’s cyber serenity without even a hint of the user’s knowledge? We bet that’s how it was. Windows Supervision Center is actually a scareware solution possessing plenty of guts to screw one’s computer system up. That’s not its main goal though. What this app wants is to give you a false impression as if your machine were not acting right. It runs scanners and displays pop-ups that distort your computer reality completely, or at least try to. Windows Supervision Center claims to find serious issues with your workstation such as critically low efficiency and multiple security problems originating from the malicious viral activity. No matter what info Windows Supervision Center reports, you should not fall for it. Just keep in mind that this little prankish cyber entity wants your money.

May 09

Malware Analysis:

Windows Oversight Center mimics the routine which is typical to regular optimization software. Unfortunately, it does not go beyond mimicking only. This application attempts to call forth some uncertainty about the proper health of your system. It states that some critical malfunctions have been found with your workstation. Windows Oversight Center runs scanners and triggers some pop-ups for that. In addition to reporting false facts about software and hardware problems, Windows Oversight Center also misinforms you of severe malware attacks that caused ‘critical file system vulnerability’ and similar side effects. Another interesting feature of this malware item is the way it spreads. Windows Oversight Center is delivered by a trojan that displays a fake Microsoft Security Essentials alert claiming that Unknown Win32/Trojan infection had been intercepted and has to be blocked from accessing your PC.

May 07

Malware Analysis:

Essential Cleaner is one of those nasty PC programs we wish you to never run into. Nevertheless, the fact this malware infects computers latently presupposes the user’s inability to influence this contamination in any way. There is a common set of symptoms you can tell this threat by. First of all, it’s the annoying phony scanning activity it conducts. Once Essential Cleaner finds itself inside your system it starts saying that your computer is infected with 30 or more viruses. You learn this pseudo information from the counterfeit scan results and bogus popup notifications this badware keeps generating. Of course if an average user finds out about the alleged residing of multiple infections on his/her machine, the logical next step would probably be the removal of these parasites. At that point Essential Cleaner takes advantage of one’s credulity and recommends activating the licensed version of the software.

May 05

Malware Analysis:

PC Security Guardian is a fake antivirus program that not only fails to actually spot and remove existing malware but also jeopardizes your computer and puts your privacy at risk. PC Security Guardian is a clone of Internet Security Essentials rogue anti-spyware and thus has much in common with it. If you pay attention to the GUI design, it’s pretty much the same. So is the general pattern of behavior in terms of the distribution, PC infiltration and the goals pursued. PC Security Guardian usually needn’t pass your authentication for getting inside your system. It gets in through a security hole or some software split and always makes use of trojan horses in this activity. During its stay on your computer, PC Security Guardian tends to run virus scanners that display reports in the end stating you are being threatened by multiple infections. This rogue also triggers popup ads bringing some alarming news for you.

May 04

Malware Analysis:

Win 7 Internet Security 2011 virus can be easily confused with a real virus detection and removal program. It has the right graphical interface, seems to act like a legit tool and produces a nice overall first impression. This is the situation though when you should not be driven by this first impression. Win 7 Internet Security 2011 may crop the seed of disappointment with security software as it provides users with pseudo facts about their computers’ health. As one can tell from the name, this program infects Windows 7 PCs, although this statement is pretty controversial. You see, Win 7 Internet Security 2011 is running the executable which transforms itself into a certain malware sample considering the Operating System contaminated. So if you have XP for instance, the name would be XP Internet Security 2011 for the exact same malicious code. When the badware in question infests your computer it starts acting aggressively, displaying many bogus malware interception warnings and other types of notifications like scan reports.

May 02

Malware Analysis:

Win 7 Home Security 2011 continues the list of the fake anti-spyware applications that have crossed the boundaries of legitimate software distribution quite a while ago. This utility is one of the many programs using the Operating System determining technique in their propagation. Therefore the exact same malignant code would miraculously turn into XP Home Security 2011 if it landed on a computer running Windows XP. As a matter of fact, the latter program (the XP variant) has already been analyzed on this blog and it does not differ much from the malware being presently described. Win 7 Home Security 2011 launches a system scan right after attacking one’s computer. The scanner is coded to list some items that should alarm the victim. We mean Win 7 Home Security 2011 reports a number of dangerous infections on your PC, offering an option to eliminate them all literally in one click. However, removal of the ‘detected’ viruses is not going to take place unless you first pay for Win 7 Home Security 2011 on a separate screen you will be redirected to.

Apr 30

Malware Analysis:

Antivirus Center might be mistakenly taken for a computer program that does a great deal of virus protection help. Now, forget about this impression as it is a totally, absolutely false one. Antivirus Center has one main goal which is really fraudulent. It tries to force users into paying for its license by means of conducting pseudo malware detection activity. Consequently, the whole spectrum of its actions is entirely dedicated to achieving that bad mission. Antivirus Center hardly ever passes the standard authentication when entering one’s machine. It knows a ‘better’ or at least a much easier method to get in. The trojans affiliated with the distribution of this scam usually lurk somewhere on the web, being embedded in some links of files people may click or download, respectively. Then, it’s a matter of seconds for Antivirus Center to upload all of its malicious files and start actively fulfilling its plan. It confuses you with deceptive popup warnings that inform you of many security issues found on your PC.

Apr 28

Malware Analysis:

XP Anti-Spyware 2011 will do you a really bad favor if it finds itself on your computer. Having this program inside your system is a situation of entrapment you can only avoid if you completely remove this pest from your PC. XP Anti-Spyware 2011 is based on the universal malicious component which is capable of determining the injected Operating System on the stage of early infiltration. This means the badware will get quickly configured to obtain its name basing on the OS it had got inside. It’s therefore a piece of cake to figure out that XP Anti-Spyware 2011 is an entirely XP based malware application. It looks sleek (see image below) and produces the first impression of the software aiming to provide you with all necessary support for various aspects of computer protection. Unfortunately, the actual essence of XP Anti-Spyware 2011 turns out the opposite. It only pretends to be useful and reliable. The scareware will repeatedly run pseudo scanners that always list a bunch of infections.