Tag Archives: rogueware
Alert: Malware emails are not just in English – They also exist in Spanish.
Since the start of TechGeekandMore one of the biggest focuses has involved Malware and Rogueware. Malware and Rogueware can infect a pc via various ways (visiting websites, clicking on links, via emails, etc….). Until now, all the email warnings covered English language emails, because that’s what was known to exist. However as of now I can officially report that those emails are now multi-language. This evening I received an email (from a Spanish speaking family member) that says “Amix, esto tienes que probarlo”, which loosely translates to “Buddy, You have to check this out”.
The English version of the email has been a regular for a while, “Checking to see who is blocking you on messenger”. The hook being that if you click on the provided link in the email, that you will be able to see (supposedly) who has you blocked from their MSN Messenger list. As noted while looking at the email source (below), it is almost an exact translation of the English version, claiming that if you look at the link you will be able to see who is blocking you (I did block the internet addresses within the source of the email)
What the link actually does is install a version of Antivirus2009 (or 2010) which causes a lot of headaches for the user and normally requires a tech to clean up or reinstall your computer. If you have any Spanish speaking family or friends, we highly recommend that you let them know NOT to open this email, and to just list it as junk mail and delete it. If they have already opened the email, they can use programs like the free version of SuperAntiSpyware (LINK: http://www.superantispyware.com/superantispywarefreevspro.html (http://www NULL.superantispyware NULL.com/superantispywarefreevspro NULL.html)) or the free version of Malwarebytes (LINK: http://www.malwarebytes.org/ (http://www NULL.malwarebytes NULL.org/)).
ALERT: Fake Antivirus software really adware meant to take your money $$$
Story (and pictures) from the Panda Labs website (LINK: http://www.pandasecurity.com/emailhtml/oxygen/022809_ENG_in.htm (http://www NULL.pandasecurity NULL.com/emailhtml/oxygen/022809_ENG_in NULL.htm))
Anti-Virus-1: A new fake antivirus
Anti-Virus-1 is adware, specifically a "fake antivirus". As with all such adware, it is designed to simulate a scan of the computer, supposedly detecting thousands of strains of (non-existent) malware. The end aim is to sell users a pay version of the fake antivirus in order to eliminate the threats.
When run, this adware warns the user that the computer is not protected. The main screen displayed (http://www NULL.flickr NULL.com/photos/panda_security/3313653378/) is a spoof of the Window Security Center
It then pretends to scan the system for malware (http://www NULL.flickr NULL.com/photos/panda_security/3313653384/). If users do not immediately take the bait and buy the pay version of the fake antivirus, the malicious code will sporadically display a message reminding the user that the computer is infected (http://www NULL.flickr NULL.com/photos/panda_security/3313653386/)
In warning messages, and after the fake scan, a link is provided from which users can download the fake antivirus. Anyone clicking on the link will be redirected to a page like this (http://www NULL.flickr NULL.com/photos/panda_security/3313653390/).
Additionally, when infected users visit certain Web pages with comparative reviews of antivirus products, there will be redirected to a spoof page showing a review of an ‘antivirus’, called Antivirus2010, with functions and characteristics similar to Anti-Virus-1.
"By doing this, cyber-crooks hope that users will download this adware on their own initiative. This makes it far less likely that users will suspect that they have been infected and consequently more likely that they will buy the fake antivirus", explains Luis Corrons, Technical Director of Panda Labs.
