Spyware Techie

Do you know what Files Secure is?

DESCRIPTION

Files Secure is a rogue anti-spyware program that may display fake warning messages and run a false malware detection in order to make you believe you’re machine is infected with spyware.

Files Secure displays exaggerated security alerts in an attempt to trick you into purchasing the full Files Secure version. Files Secure error message states that your computer is infected or hijacked with a type of Trojan and that you need to download Files Secure to solve your problem.

Files Secure fake alert message:

Critical System Error!
Your browser was hijacked by Trojan.Win32.Agent.akk
You need to clean your system immediately, in other case it can be crashed soon!
Click OK to download the high-tech antispyware protection software! (Recommended)

Once Files Secure finishes scanning you computer, it will report false positives and message will appear that prompts you to click the button to download the recommended software to remove the alleged infection. That way you’re persuaded to buy the Files Secure program.

What is the Windows Registry?

The Windows Registry is a grouped database storing all of the Window’s Operating System settings, preferences, and hardware configurations. The Windows Registry also referred to as the Registry, is constructed in a hierarchy database. Any software installed on a system will reference the Registry for it’s specified settings for operation. The understanding of the Windows Registry in depth can be complex.

A down to earth overview of the Windows Registry

Without the Registry Windows would not function and your system would be a big paper weight. The Windows Operating System and all software applications constantly reference back to the registry for basic functions. Think of the Registry as a infinite customization tool for your computer. It stores the key to changing the settings to just about any customizable function within reason of installed software. You can’t change a programs over-all functionality with the registry but you can certainly manipulate the basic functions and behavior of a given program.

Do you know what Directnameservice is?

DESCRIPTION

Directnameservice is a browser hijacker that infects a computer through a Trojan. Directnameservice hijacks your homepage and redirects it to a rogue website called Directnameservice.com. Directnameservice may pop up windows that lead to Directnameservice.com or Adservertoo.com. It is recommended that you remove Directnameservice.com because it may send sensitive data from your computer to a third-party server which can result in data theft.

Do you know what Packed.Morphine.D is?

DESCRIPTION

Packed.Morphine.D is a trojan that is also known as BHO.CVX. Packed.Morphine.D hijacks your IE browser and redirects you to a predefined website. If you’re infected with Packed.Morphine.D, you’ll most likely get the following warning message from your anti-spyware program: Threat detected! D3dpmesho.dll Virus identified as Packed.morphine.d.. This warning message means that you’re infected with BHO.CVX.

Packed.Morphine.D may prove difficult to remove because it has the ability to reappear after reboot.

Do you know what StorageProtector is?

DESCRIPTION

StorageProtector is a rogue anti-spyware program that may display fake warning messages and run a false malware detection in order to make you believe you’re machine is infected with spyware. StorageProtector’s deceptive advertising tactics are only an attempt to mislead you into buying the full version of the program. StorageProtector may install onto your machine through a Trojan that poses as a fake video codecs used to view porn videos.

Once StorageProtector finishes scanning you computer, it will report false positives and message will appear that prompts you to click the button to download the recommended software to remove the alleged spyware. That way you’re persuaded to buy the StorageProtector program.

Do you know what BHO.CVX is?

DESCRIPTION

BHO.CVX is a browser helper object that pops up fake warning messages, hijacks your IE browser and redirects you to a predefined website. BHO.CVX may use your system’s memory space to perform any action within Internet Explorer. BHO.CVX may come bundled with rogue video codec, shareware or other questionable downloadable software. So if you insist on using shareware, be aware that there is a possibility that you’ll be exposed to unwanted malware.

Many popular anti-spyware programs will detect BHO.CVX as Packed.morphine.d and you may get the following message from your anti-spyware program: Threat detected! D3dpmesho.dll Virus identified as Packed.morphine.d.

BHO.CVX may prove difficult to remove because it has the ability to reappear after reboot.

Do you know what Worm.Win32.Netsky is?

DESCRIPTION

Worm.Win32.Netsky is a worm that spreads itself via the Internet as an attachment to messages. Worm.Win32.Netsky sends itself to email addresses collected from the user’s machine.

Worm.Win32.Netsky is activated when the user clicks on the attachment, launching and then installing and propagating itself.

Worm.Win32.Netsky displays exaggerated pop-ups, fake infection warning messages, hijacks, and often slows system performance.

Do you know what AdwareRemover2007 is?

DESCRIPTION

AdwareRemover2007 is a rogue anti-spyware program that infects users through browser security exploits and websites of dubious content by a Trojan Zlob.

Once the Trojan is installed on your machine, it will display exaggerated fake warning messages and threat scan reports in an attempt to trick you into purchasing the full AdwareRemover2007 version. AdwareRemover2007 guarantees to remove all non-existent threats, but instead it installs other malware onto your computer. AdwareRemover2007 may also cause a slow performance of your computer.

AdwareRemover2007 fake alert message:

Google Error:
“Your computer has been running slower than normal, it may be infected with Viruses, Adware or Spyware. AdwareRemover2007 will perform a quick and completely FREE scan of your system for malicious programs. Download AdwareRemover2007 for FREE now!”

“Security Status: System is infected, Protection level is critically low.”

Do you know what Trojan.Qhost.WU is?

DESCRIPTION

There’s a new Trojan called Trojan.Qhost.WU that hijacks Google Adsense (text advertisements), in order to redirect ads from Google servers to a rogue server that displays ads from a third party. Trojan.Qhost.WU changes the infected machine’s Hosts file and redirects the host ‘page2.googlesyndication.com’ to point to a different IP of a different address.

It is a blow for both Google and webmasters because Trojan.Qhost.WU is taking away viewers and possible revenue from their websites.

Do you know what AntiSpyPro is?

DESCRIPTION

AntiSpyPro is a rogue anti-spyware application that can be downloaded and installed manually onto users’ system by trojans such as Zlob. AntiSpyPro displays exaggerated security alerts difficult to close in an attempt to trick you into purchasing the full AntiSpyPro version. AntiSpyPro error message states that your computer is infected with spyware and that you need to download AntiSpyPro to solve your problem.

AntiSpyPro allows you to perform a scan, which presents you an exaggerated error report. After seeing the report, the user is prompted to purchase the full version of the program in order to clean the false errors.