by malwarekilla on August 16, 2010
In my last post I briefly went over how I use Sandboxie and how I encourage my family and clients to actually use it. In this post I’m going to show you how to configure Sandboxie so that it’ll automatically delete anything that gets downloaded into the Sandbox (like some fake (rogue) anti-virus for example). [...]
by malwarekilla on August 4, 2010
The only rogue I’ve been seeing this month (over and over again) is the AntiVir Solution Pro (a.k.a – Antivir Security Suite). This rogue (fake) Anti-Virus installs itself instantly and then: prevents the user from using the internet. loads generic porn sites. tells the user that a “key logger” may have been installed or their [...]
by malwarekilla on July 29, 2010
I had one hell of a mystery on my hands the other day. A client called me and said she had a blank screen every-time she booted up her Windows XP computer. I was pretty busy, so I told her I’d pick it up and work on it over the weekend. I just figured it [...]
by malwarekilla on July 27, 2010
A few of our engineers at work approached me about protecting their USB flash drives when they go to customer sites and I found a pretty good solution: http://www.addictivetips.com/windows-tips/how-to-protect-usb-drive-from-virus-when-attached-to-infected-computer/ Unfortunately I can’t seem to find an antivirus solution (I’ve only done 3 google search though), however making the drive read only is a pretty good idea [...]
by malwarekilla on May 19, 2010
The latest generation of Rogue Anti-Virus changes your internet connection settings, specifically the proxy settings. On an infected PC all traffic is routed through a local proxy on your pc (which is malware based). Currently these settings are usually: 127.0.0.1:5555 The 127.0.0.1 is your PC and the 5555 is an open port on your pc [...]
by malwarekilla on March 10, 2010
Question: Well my friend’s computer got infected with XP Antispyware 2010, it really messed up his computer. He was able to kill it with SuperAntiSpyware, but i guess his computer still has some effects from the rouge. The computer is really slow, the rouge corrupted Firefox and IE, he can’t even open CCleaner or Defraggler. [...]
by malwarekilla on March 2, 2010
Just in case ya didn’t know Malvertising is the #1 way to get infected due to the numerous security holes found in: Adobe Reader (acrobat) Adobe Flash Player Sun’s Java Those are the top 3 applications being exploited right now. You may be wondering how you got infected with a fake anti-virus program (for [...]
by malwarekilla on February 11, 2010
I’ve been seeing a huge increase in machines that are infected with a patched WS2_32.dll. WS2_32.dll is part of Windows Sockets Library and is used to configure/maintain network connections. When WS2_32.Dll becomes patched you’ll notice the following behavior: Slowly loading webpages. The pages have a 3-5 second delay since the patched DLL is executing malicious [...]