Spybot Search and Destroy has an update.
2006-05-12
Hijacker
+ VirtualMaid + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL
Keylogger
+ Win32.ActiveKeyLogger
Malware
+ WareOut + SpyContra + SpyGuard + SpyFalcon + Smitfraud-C.
Trojan
+ SafetyDefender + Tvdpay.Hupigon.CJ + Adclicker + SpywareQuake + SpywareQuake.FakeAlert
Total: 320739 fingerprints in 40583 rules for 1943 products.
http://www.safer-networking.org/en/home/index.html
Spyware Doctor has been updated with new spyware definitions.
Latest Database Version: 3.0467 0
Intelli-Signatures: 61,078
Spyware Doctor protects your computer in 3 ways. First, it has the On guard monitor which watches places spyware will change your computer settings. By alerting you, Spyware Doctor gives you the option to not allow unwanted programs on your computer. Second, Spyware Doctor has a feature called Immunize that completely blocks known spyware from even installing. Third, spyware Doctor has a large detection database that removes spyware that has gotten onto your computer. I have used Spyware Doctor in tests against SpyAxe and SpyFalcon. It completely removed the those two. A restart of the computer and resetting my wallpaper was the hardest part.
A free scan is available from the Spyware Doctor Homepage:
http://www.pctools.com/spyware-doctor/
New Intelli-Signatures:
3.0465 0 - SpywareSheriff, Trojan.Downloader.Delf.MM
3.0466 0 - Antispylab Hijacker, Backdoor.Loony.E, Backdoor.Virkel, Trojan.Downloader.Small.CTK
3.0467 0 - Backdoor.System33, NEC, Trojan.Dialer.OY, Trojan.Joker.Blogorodie
Extended Intelli-Signatures:
3.0465 0 - Adware.Voghp, Alexa, Backdoor.Bech, Backdoor.Hackdoor, BullsEye Network, eXact Advertising, Exploit.WMF, HotBar, I-Search Desktop Search Toolbar, Known Bad Sites, NaviSearch, QQFace, Specific911 Hijack, SpyAxe, Trojan.Banker, Trojan.Downloader.Agent.AFL, Trojan.Downloader.Delf.QY, Trojan.Downloader.Harnig, Trojan.Downloader.Ruins, Trojan.Downloader.Small.BUY, Trojan.Emspy, Virtumonde, VX2.Look2Me
3.0466 0 - ABetterInternet, ActiveX Objects, AdDestroyer, Adware.Henbang, Adware.Voghp, Backdoor.Sdbot.AAD, Common Components for 180Solutions items, Common Components for About Blank, Common Components for Trojans, CWS.Cassandra.A, CWS.Home Search Assistant, CWS, CWS.XPlugin, EasySearch, Email.Worm.Bagle, Instant Access, InternetOptimizer, Known Bad Sites, Malware Wipe, Maxifiles, MediaTickets, Mirar, Netvision Dialer, Powerscan, Rogue Anti-Spyware Products, Rootkit.Order, Rootkit.Se500mdm, Trojan.Crypt.E, Trojan.Downloader.CashDeluxe.A, Trojan.Downloader.Small.ATL, Trojan.Downloader.Small.VQ, Trojan.Dropper.Agent.HL, Trojan.Small related, Trojan.SpaBot, Trojan.Startpage.GE, Trojan.StartPage.GEN, Virtumonde, VX2.Look2Me, WebSearch Toolbar, Weird On The Web, WhenU.SaveNow, Zestyfind
3.0467 0 - Adware.Voghp, Antispylab Hijacker, AproposMedia, Backdoor.Beastdoor, Backdoor.SdBot.GEN, Backdoor.SDBot.XD, Comet Cursor, Common Components for 180Solutions items, Common Components for Pearl Software, Inc, Fast Video Player Dialer, ISTbar, Keylog-sters, Pearl Echo, Possible Website Hijack, SexVideoPro Dialer, Starware, Surf Speak, SurfSideKick, Trojan.Downloader.CashDeluxe.A, Trojan.Downloader.Harnig.BD, Trojan.Downloader.Harnig, Trojan.Downloader.VB, Trojan.Dropper.Small.AEK, Trojan.Killav.FV, Trojan.LowZones, WhenU.SaveNow, WinAntiVirus, Zeno Search Assistant
General Information:
Updates are posted 5 times per week on average.
Updates are installed by running Spyware Doctors' Smart Update feature.
CounterSpy 1.5 latest update definition is 335
CounterSpy is able to catch more spyware than almost every other utility on the market because the CounterSpy threat database (with the signatures of every spyware and malware utility we can identify) is constantly updated. Our researchers constantly look for ways to improve our spyware searching database so that it catches all spyware that could potentially be on your system. Keyloggers, spyware cookies, remote access trojans (backdoors), and more are all identified.
Spy Sweeper latest update.
Spyware definition: version 675
Updated May 9th, 2006
Protection against 136,911 spyware traces.
Spy Sweeper protects your computer in two ways. First, it uses what is called shields to monitor places on your computer that spyware will likely change. By alerting you, you can prevent spyware from even getting on your computer. The second way is the large threat database. With this update, there are 136,911 known spyware threats that Spy Sweeper detects and removes, should anything undesirable get onto your computer.
Spy Sweeper available from http://www.webroot.com/consumer/products/spysweeper/
On TuesdayMay 9th, Microsoft released several updates for Windows and Internet Explorer. Three of the updates, also called patches, are critical. That means your computer is at risk from hackers and criminals who can use the unfixed flaws to do things on your computer that should not be allowed. Many of the spyware makers use these flaws to get their spyware onto your computer.
This update includes two critical patches that should be installed immediately. If you have automatic updates turned on, then you should have received a notice about it. To be safe, you can check your computer and install these updates by visiting Windows Update.
In addition to updates, the Windows Malicious Software Removal Tool is part of the update process. The tool checks for some of the most serious virus and trojan risks that could be on your computer. A list of threats detected and removed by the Malicious Software Tool can be seen on the Families Cleaned page. Currently added threats include Evaman, Ganda, and Plexus. Other threats include Sober, Blaster, and Zlob. Trojan Zlob is better known by the programs it tries to sell. SpyAxe, SpywareStrike, SpywareQuake, and WinHound are a few of the ones installed by Zlob. Even thought the tool is part of Windows Update, you can run the tool anytime by visiting the tool's homepage here.
New SpywareBlaster updates available. This update adds 629 new entries to protect your computer.
Database 6294 items
Updated May 9th, 2006
SpywareBlaster is free and available from here.
SpywareBlaster can:
Ad Aware has been updated. The new definition file is SE1R107 09.05.2006
New Definitions:
========================
Adware.Advertisemen
AdwarePunisher
AntiVirusPro
SpyContra
SpywareXP
Win32.Trojan.ComputerHijacker +14
Win32.Win9x.CIH.ref +4
Updated Definitions:
========================
7adpower +2
Abox +2
Adware.DollarRevenue +21
Adware.DuDu
Adware.Henbang
Adware.HuaCiSou
Adware.Look2Me
Adware.Yazzle
Adware.ZenoSearch +3
ClickSpring
CmdServices
CnsMin +7
Dialer +2
ErrorSafe +4
IEHijacker.Hotoffers
iSearch Toolbar
Win32.Backdoor.Agent +4
Win32.Backdoor.RBot
Win32.Dialer.Trojan
Win32.Generic.PWS
Win32.Trojan.Agent
Win32.Trojan.Delf.ref +2
Win32.Trojan.DesktopHijack
Win32.Trojan.Dialer.ay
Win32.Trojan.Downloader +20
Win32.Trojan.Hexdoor +3
Win32.Trojan.LowZones
Win32.Trojan.Mirc +2
Win32.Trojan.SDBot +7
Win32.Trojan.Spambot +7
Win32.Trojan.StartPage
Win32.TrojanClicker +7
Win32.TrojanDownloader.Small
Win32.TrojanDownloader.Swizzor.br
Win32.TrojanDownloader.Zlob
Win32.TrojanProxy.Small.ref
Win32.TrojanSpy.Banker
Virtumonde
http://www.lavasoft.de/software/adaware/
Spyware Doctor has been updated with new spyware definitions.
Latest Database Version: 3.0464 0
Intelli-Signatures: 44,768
Spyware Doctor protects your computer in 3 ways. First, it has the On guard monitor which watches places spyware will change your computer settings. By alerting you, Spyware Doctor gives you the option to not allow unwanted programs on your computer. Second, Spyware Doctor has a feature called Immunize that completely blocks known spyware from even installing. Third, spyware Doctor has a large detection database that removes spyware that has gotten onto your computer. I have used Spyware Doctor in tests against SpyAxe and SpyFalcon. It completely removed the those two. A restart of the computer and resetting my wallpaper was the hardest part.
A free scan is available from the Spyware Doctor Homepage:
http://www.pctools.com/spyware-doctor/
New Intelli-Signatures:
3.0463 0 - Malware Wipe, Trojan.Downloader.Agent.AN, Trojan.Downloader.Small.CRD, Trojan.Downloader.Small.CSN, Trustin Toolbar
3.0464 0 - Backdoor.Cheeser, Trojan.Desktopscam, Trojan.Downloader.Harnig.BD, URL Replacer, WinAntiVirus
Extended Intelli-Signatures:
3.0463 0 - Backdoor.IRCBot.GW, Common Components Unrelated, CWS.Search For, CWS.Searchmeup, EliteBar, ErrorSafeFree, FU Rootkit, I-Search Desktop Search Toolbar, ISTbar, LZIO Websearch, Rogue Anti-Spyware Products, SpywareStrike, Surf Accuracy, Transponder.Bolger, Trojan.Downloader.Delf.QY, Trojan.Downloader.Small.CKT, Trojan.Downloader.Zlob.GEN, Trojan.FakeAlert, Trojan.Popuper, Trojan.Proxy.Small.BO, Trojan.Proxy.Small.CT, Trojan.Qhosts, VX2.Look2Me, Webhancer, WebSearch Toolbar, Zeno Search Assistant, ZeroPopupBar, Zquest
3.04640 - AproposMedia, Backdoor.Hackdoor, Backdoor.LameBot.B, Backdoor.SDBot.XD, BookedSpace, Common Components for WinSoftware, Common Components Unrelated, CWS.XPSystem, Dollarrevenue, ISTbar, LockSky, Rootkit.Order, SpywareSoftstop, Surf Accuracy, Trojan.Downloader.CashDeluxe.A, Trojan.Downloader.Harnig, Trojan.Downloader.Perfcl, Trojan.Downloader.Ruins, Trojan.Downloader.VB.VE, Trojan.Dropper.Small.AEK, Trojan.Fivesec.A, Trojan.Proxy.BK, Trojan.Proxy.Lager.f, Trojan.StartPage.GEN, WinFixer, WinSpy Stealth Monitor
General Information:
Updates are posted 5 times per week on average.
Updates are installed by running Spyware Doctors' Smart Update feature.
Spy Sweeper latest update.
Spyware definition: version 674
Updated May 8th, 2006
Protection against 136,800 spyware traces.
Spy Sweeper protects your computer in two ways. First, it uses what is called shields to monitor places on your computer that spyware will likely change. By alerting you, you can prevent spyware from even getting on your computer. The second way is the large threat database. With this update, there are 136,800 known spyware threats that Spy Sweeper detects and removes, should anything undesirable get onto your computer.
Spy Sweeper available from http://www.webroot.com/consumer/products/spysweeper/
I thought I'd post some screenshots of the fake Windows error and warning messages from SpyFalcon. All of them attempt to look like they are legitimate messages from Windows in some way. About the only good thing about them is you can close them by clicking the "x" in the upper right hand corner of the window without being taken to some unwanted site. You can click the pictures to see them better since I made them smaller to fit this post.
The next one doesn't look like a pop up window, but a real error warning from Windows. Critical system error is sure to make many people wonder. They did mess up because the last word isn't a real English word.
Next, we have another one using a critical error as a way to get your attention. It suggests to download patches from official partners trying to sound like the programs are sponsored by Microsoft.
The next one isn't as in your face about critical errors, but it still has the Internet Explorer "e" symbol in it. Looks like they misspelled "choose" as "chose". One way you can tell that the warning is not real is by some error in the warning. Misspelled English words that are not the ones that are usually spelled wrong is one of the easier ways to tell. Another one is the way the sentences are written. It just doesn't sound right. It is written in a way that no one who is a native English speaker would write it.
Spybot Search and Destroy has been updated. Details of the update are:
Dialer
++ MainPean
Hijacker
+ CoolWWWSearch.HomeSearch + Dynamic Desktop Media + Teslaplus.com + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL
Malware
+ SpywareNo + Vcodec + SmitFraud-C. ++ SpywareSoftStop
Spyware
+ GAIN.Gator + Cydoor
Trojan
++ Win32.Small.amd ++ Win32.Small.cjy ++ Win32.VB.xj
Total: 319618 fingerprints in 40397 rules for 1938 products
http://www.safer-networking.org/en/home/index.html
CounterSpy 1.5 latest update definition is 334
CounterSpy is able to catch more spyware than almost every other utility on the market because the CounterSpy threat database (with the signatures of every spyware and malware utility we can identify) is constantly updated. Our researchers constantly look for ways to improve our spyware searching database so that it catches all spyware that could potentially be on your system. Keyloggers, spyware cookies, remote access trojans (backdoors), and more are all identified.
