Sunday, July 6, 2008

List of new Rogue security applications

List of new Rogue security applications

Last week was a busy week for the scammers, There was lot of malicious sites discovered which were involved in distributing new rogue security applications. After a numerous flavors of rogue Antivirus applications it's now the turn of rogue Antispyware trying to loot money from the users.

WinAntiSpyware 2008

WinAntiSpyware 2008 is a rogue Antispyware application which is a near clone of Winreanimator rogue Antispyware application. Malwarebytes has reported this rogue here. This group calls themselves as "WinTechProtection LTD"

Site Name: WinAntiSpyware2008.com
IP Address: 206.161.126.40

Screnshot of WinAntiSpyware 2008 appplication

Additionally the following malicious sites also shares the same IP Address [206.161.126.40]

Site Name: Antispywarexp2008.com
Site Name: Winantimalware.com
Site Name: Winreanimator.com
Site Name: Xpantispyware.com
Site Name: Xpcleaner2008.com
Site Name: Xpdefender2008.com
Site Name: Xpguard2008.com
Site Name: Xpsecuritycenter.com

Antispyware 2008

Antispyware 2008 is a rogue Antispyware application. Its The rogue application has already been reported by Flash and Edgar a couple of day earlier.

Screnshot of Antispyware 2008 appplication

The following is the list of sites used by the rogue to do its dirty task:

Site Name: Antispyware2008.org
Site Name: Antispyware2008a.com
Site Name: Anti-spy-ware-2008.com
Site Name: Antispyware2008y.com
Site Name: Antispyware2008.name
Site Name: Antispyware-2008-download.com
Site Name: Antispyware-2008-download.info
Site Name: Antispyware-2008-download.net
Site Name: Antispyware-2008-download.org
Site Name: Antispyware-2008-download.name
Site Name: Antispyware-2008.info
Site Name: Antispyware-2008.org
Site Name: Antispyware-2008.name
Site Name: Antispyware2008-download.com
Site Name: Antispyware2008-download.info
Site Name: Antispyware2008-download.net
Site Name: Antispyware2008-download.org
Site Name: Antispyware2008-download.name


PC Antispy and PC Clean Pro


PC Antispy is a rogue Antispyware application. Its a clone of PC-Antispyware rogue Antispyware application. Malwarebytes has reported this rogue here

Site Name: Pc-antispy.com
IP Address: 74.52.32.66

Screenshot of PC Antispy application

PC Clean Pro is a rogue security application and is a near clone of Pc-Cleaner. Malwarebytes has reported this rogue here

Site Name: Pc-cleanpro.com
IP Address: 74.52.32.67

Screenshot of PC Clean Pro applciation


Detection of these rogues are a bit poor, Stay away from all these sites.

Bharath M N

blog comments powered by Disqus