Metallica's blog

How to remove PcVaccine

February 26, 2011 on 7:32 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called PcVaccine.

How do I know if I am infected with PcVaccine?

This is how the main screen of the rogue application looks:

How do I remove PcVaccine?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove Windows Shield Center

February 24, 2011 on 8:24 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called Windows Shield Center.

How do I know if I am infected with Windows Shield Center?

This is how the main screen of the rogue application looks:

How do I remove Windows Shield Center?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove SpecialGuard

February 21, 2011 on 11:11 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called SpecialGuard.

How do I know if I am infected with SpecialGuard?

This is how the main screen of the rogue application looks:

How do I remove SpecialGuard?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove Windows Risks Eliminator

February 16, 2011 on 5:27 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called Windows Risks Eliminator.

How do I know if I am infected with Windows Risks Eliminator?

This is how the main screen of the rogue application looks:

How do I remove Windows Risks Eliminator?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove Safecare

February 15, 2011 on 2:18 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called Safecare.

How do I know if I am infected with Safecare?

This is how the main screen of the rogue application looks:

How do I remove Safecare?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove Windows Utility Tool

February 14, 2011 on 3:10 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called Windows Utility Tool.

How do I know if I am infected with Windows Utility Tool?

This is how the main screen of the rogue application looks:

How do I remove Windows Utility Tool?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove Windows Optimal Solution

February 13, 2011 on 2:03 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called Windows Optimal Solution.

How do I know if I am infected with Windows Optimal Solution?

This is how the main screen of the rogue application looks:

How do I remove Windows Optimal Solution?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove PrivacyHidden

February 12, 2011 on 4:17 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called PrivacyHidden.

How do I know if I am infected with PrivacyHidden?

This is how the main screen of the rogue application looks:

How do I remove PrivacyHidden?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove SmartScan

February 8, 2011 on 8:02 pm | In Malware analysis | No Comments

Malwarebytes’ Anti-Malware detects and removes a new application called SmartScan.

How do I know if I am infected with SmartScan?

This is how the main screen of the rogue application looks:

How do I remove SmartScan?

Visit our forums for detailed instructions. You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz

How to remove “Nice picture” backdoor

February 6, 2011 on 5:31 pm | In Malware analysis | No Comments

Today I was rudely disturbed when one of my Facebook friends sent me two of the exact same messages in a short period of time. As I am not the type that clicks on anything and it was suspicious that this friend would send me a message in English, I did some research first.
These are the messages she sent me:

It turned out the link led to a message that the picture had been moved, but meanwhile a file was being downloaded.
I carefully downloaded the file to my VM and ran it to see what would happen. A short while after running the file, browser windows opened and connected to myspace and facebook.
That was suspicious enough, so I put the scan through an online scanner Jotti’s malware scan and ran our own scanner MBAM.

On Jotti only Ikarus recognized the file as Trojan.Win32.Llac and MBAM came up with a heuristic detection as Malware.Trace
So I alerted our Assistant Director of Research and sent her a sample.

A few hours later MBAM had full detection. You can read how to remove this backdoor on our forums . You can also get help there should you need it.

And note that the full version of Malwarebytes’ Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.

Pieter Arntz