Attack of the clones: Antivirus'09

2009-04-15T06:45:00.000-07:00

Antivirus'09 is a redesigned clone of WinDefender 2008 rogue security product. This rogue uses fake/scare scanner pages to trick users into downloading the rogue application.

Here is the comparison:

(Antivirus'09 interface)

(Win Defender 2008 interface)

(Antivirus'09 - Fake Security Center)

(Win Defender 2008 - Fake Security Center)

Antivirus 09 is able to mimic security alerts. Once installed, the program keeps loading fake infection warnings and it keeps asking to pay for using the tool. Antivirus’09 is a scam and a computer parasite. Avoid purchasing this program unless you want to support malware creators and to lose your online banking account.

Antivirus09 displays the following message:

“Malware or Advertising item was detected by Antivirus’09!
Detected Virus:Downloader.Small-772
Malicious object can corrupt your computer files and documents, and steel you personal data such as credit card info or email accounts!
Register to protect from next attack!
VIRUS ATTACK DETECTED!”

To remove the threat you can install one of well known antispyware programs.

Remove Spyware Protect 2009 (SpywareProtect2009 removal instructions)

2009-04-13T03:37:00.000-07:00

Spyware Protect 2009 ( also known as SpywareProtect2009 ) is a well known rogue antispyware software that shows many fake warning balloons, alerts and popups. It starts generating warning messages claiming system infection in order to force users into purchasing the full version of the program. Spyware Protect 2009 is a dangerous application and it should be deleted as soon as possible.

Spyware Protect 2009 comes to the computer with a help of trojans (e.g. Conficker) or other similar viruses. Also it can be downloaded and installed from scammers' website, but this is less common case. Once SpywareProtect2009 enters the system, it starts computer scan automatically and produces many pop-up windows with fake information about system's security problems, errors and other infections. In such a situation cyber-thieves recommend to use their counterfeit product called Spyware Protect 2009. It should also be noted that it is paid.

Spyware Protect 2009 properties:

Changes browser settings
Shows commercial adverts
Connects itself to the internet
Stays resident in background

Symptoms of SpywareProtect 2009

Pop up balloon warning messages claiming that your PC is infected.
"Critical System Error",
"Your computer is infected",
Hijacked homepage to swp2009.com, spyprotect2009.com, sp-protect2009.com or obscure webpage.
Blocks internet connection with the browser-security.microsoft.com blocking page
Flashing icons appear on your system tray (Near of your system clock).
Garbage in the hosts file

You can remove Spyware Protect 2009 manually (good guide is here)
Or you can also download and run one of well known antispyware/antivirus products:

A blog about spyware, adware and other malware threats

Attack of the clones: Antivirus'09

Remove Spyware Protect 2009 (SpywareProtect2009 removal instructions)