May 29

Malware Analysis:

Just like we expected, a new fake optimization utility has come on stage to ruin the opinions of many users that the Internet is a safe place. Windows Necessary Firewall is the name for this latest mendacious software. It can be delivered to your computer in several ways but the dominating method is making use of the notorious fake Microsoft Security Essentials alert. This notification is typically displayed by a trojan horse after you click some link or ad when surfing the web. This warning usually pops up out of the blue and tells you some scary threat called Unknown Win32/Trojan has been detected and you need to immediately run a scan to locate and eliminate it. If triggered, the scanner will continue intimidating you by reporting other infections, e.g. Trojan.Horse.Win32.PAV.64.a. This is how people get encouraged to download Windows Necessary Firewall on to their PCs. From this moment on, you will keep seeing more and more of those nagging pop-ups and scanners that are fabricated beyond doubt.

May 28

Malware Analysis:

It’s a shame that spreading of scareware apps has become a routine process. Windows Custom Settings contributes to this unfortunate impression. The clones of this malicious software have entered the daily life of many PC users. Indeed, we have listed and analyzed tens of twin malwares that share the same User Interface, act similarly and differ only in their names. Windows Custom Settings is one of them, being just another predictable threat that will be replaced by a new one tomorrow. Still, we try to keep track of those and here are the basics of what you need to know about it and how to treat it. Windows Custom Settings is distributed in accordance with the established patterns that are common for its clones. It installs itself without your consent and mostly without even making you aware of this. It is about a trojan horse hopping on to your system and doing the rest of the job for promoting Windows Custom Settings inside.

May 26

Malware Analysis:

Windows Risks Preventions virus (aka Windows Risks Prevention) is new to us by the name but not new at all by the way it acts. This is the almost classical example of a pseudo security utility. It has an attractive external shell but the insides are totally corrupted. Windows Risks Preventions was made to fit in the standard scheme characteristic of this type of malware. It is promoted via deceptive pretences and makes it hard to avoid its intrusion. The user will therefore be quite surprised to see this virus running on his/her computer since there never was any sort of authorization or whatsoever. It’s pretty difficult to resist its annoying tactics that start off when the program is operating inside your machine. Windows Risks Preventions displays numerous alerts that are false by their nature. It generates scanners that are nothing but animations created far outside your system. We mean the scan results are determined regardless of the PC Windows Risks Preventions finds itself on.

May 25

Malware Analysis:

Believe us – you don’t want Windows Profile System program on your computer. Problem is, it may already be inside there since you have been looking it up on a Search Engine. If so, you probably know Windows Profile System is a heck of a nuisance. This is annoying rogue software that makes you do the wrong things. It lists many system problems during its stay on your machine. For attaining this goal, Windows Profile System uses counterfeit scanners like the one shown on the image below, as well as deceitful popup notifications. Having analyzed and described hundreds of similar badware applications earlier, we were able to conclude with confidence that this one follows the exact same path. It tries to scare its victims into buying the license so that all the problems can be allegedly fixed. We assure you Windows Profile System does not show the actual condition your computer is in. All the malfunctions and virus issues reported by this scamware are imaginary with regard to your PC.

May 23

Malware Analysis:

On hearing of a program called Security Solution 2011, what would your first thoughts be? Some would say it is an application meant for providing one’s protection against viruses, malware and other dangerous computer infections. The above statement could apply to Security Solution 2011 if it weren’t for one important fact we would like to inform you of. This utility is a fake PC protection client. It installs without permission, runs phony scanners reporting tons of threats and persists until the user purchases its full version. Let’s describe this pest according to the activity patterns we have listed. This malware would be useless if it couldn’t infect PCs, right? That’s exactly what it is particularly good at. Security Solution 2011 can easily sneak by your authentication and the antivirus software installed. The second phase is about making some changes to the infested Operating System. Security Solution 2011 adds new Registry keys, thus ensuring the execution of its processes during Windows sessions, and creates some files that are needed to complete the overall contamination plan.

May 21

Malware Analysis:

Windows Safeguard Utility is another rogue computer optimization program from the same family as Windows System Tasks. The ‘rogue’ status implies the standard set of characteristic features of this application. Its relatively short life cycle (around 2 days) incorporates backdoor infiltration into one’s PC as well as displaying fake scanners and misleading popup alerts. Windows Safeguard Utility reports some harsh problems with the performance of your machine and virus protection reliability. By stating that your Operating System is or is about to act unstable, this malware tries to attract your attention to the alleged fact that you have to urgently do something about this inappropriateness. To put it differently, Windows Safeguard Utility suggests that you buy its licensed version to cope with the issues that had been reported. A peculiar trait of this scareware is it combines the functions of a phony optimizer with those of a rogue antivirus utility as it reports some viruses on the computer it infected.

May 19

Malware Analysis:

It’s not at all accidental that we labeled Security Shield Pro 2011 (aka Security Shield Pro) a rogue program. Reason is, it acts like an antivirus product while being in fact a totally worthless application in this regard. Security Shield Pro 2011 spreads in several ways, the predominant being the browser oriented one. It consists in injecting the associated malcode via a phony scan website. Once Security Shield Pro 2011 gets in, it begins the annoying part of its plan. You will start seeing scanners and pop-ups that report multiple virus threats like worms, trojans, spyware and others. It’s pretty easy to figure out why Security Shield Pro 2011 tells you that you got those pseudo infections (that’s right – pseudo, because they are not on your computer for real). The program tries to persuade you that your privacy is not safe, neither is your computer on the whole. Those who get scared and perplexed after receiving alerts like that may end up falling into the trap Security Shield Pro 2011 makes.

May 18

Malware Analysis:

Unfortunately, Windows System Tasks is one of those computer programs that turn out fake eventually, although at first sight it may appear to be trustworthy and effective in what it claims to do. Windows System Tasks has many clone malwares such as Windows Tasks Optimizer, Windows Work Catalyst and many many others that keep on getting created with the regularity of one day. Since we described the previous versions in detail, there is hardly anything else to add regarding Windows System Tasks malware. It’s very similar in the looks, the tactics and the final mission it attempts to attain. The only thing that makes it any different from the predecessors is the name perhaps. Just in case, allow us to list the most essential details that outline this program’s nature. Windows System Tasks comes into one’s computer with a trojan horse that gets downloaded by the unsuspecting user in bundle with some allegedly useful stuff offered online. When inside and operating, Windows System Tasks shows the victim many ads (scanners and popup notifications) that inform him/her of critical errors found.

May 17

Malware Analysis:

Windows Vista Recovery utility is out there to only fool users and suck in their money. It’s a phony system help solution that claims to correct any software errors and even fix some hardware issues. But instead of actually doing so, Windows Vista Recovery simply makes people waste their money on its full version and imitates the repair procedure, without even having the sufficient capability to find or eliminate any such problems. Windows Vista Recovery is difficult to spot on the stage of PC intrusion since it practices the backdoor tactics for this. It means the files affiliated with this virus get uploaded to your system by a trojan horse that had entered the computer some time earlier. That’s precisely why not all antivirus clients can clearly identify the threat and stop it from accessing the PC and evolving into something big and malicious. Windows Vista Recovery typically displays obnoxious notifications such as scanners and system error ads stating that you got problems. This scareware reports computer hard drive issues, RAM memory problems and other types of malfunctions that have to do with the work of your machine. Guess what happens next.

May 14

Malware Analysis:

Can you notice many differences between Windows Tasks Optimizer and Windows Work Catalyst (navigate to the description of the latter via the link provided)? That’s right – they are clones and the only thing that enables one to differentiate them from each other is the name. Windows Tasks Optimizer scans your PC for potential system problems like Registry issues, redundant files and viruses. But there’s a trick there – you see, this app does not actually find those malfunctions. It simply mimics this kind of activity to try and convince you that you really got issues to take care of. Here is our advice for you in terms of treating Windows Tasks Optimizer – do not fall for it, no matter how persuasively it may attempt to lure you into doing something silly. We mean it will recommend purchasing its licensed version in return for alleged fixing of the problems you have purportedly run into.