Month: <span>May 2016</span>

OS Firewall is a scareware program from the Rogue family that displays fake security alerts that state your computer is infected and then prompts you to call the 1-855-270-1376 remote tech support number. These alerts are worded to scare you into thinking your computer has a problem so that you call the listed number. These telephone numbers, though, are for remote support companies who will try to sell you unnecessary support services or software.
Read more “OSFirewall.exe and Fake Suspicious Warning”

The Powered by Adware is a program that injects advertisements into web sites while you are visiting them. This adware will also open up new tabs that shows incredibly annoying advertisements whenever you click on a link on a site. This makes browsing the web very frustrating as you will constantly be shown a barrage ofPowered by advertisements that overlay the content you wish to view. Furthermore, having this program installed on your computer will cause your browser to become slow or freeze altogether due to the amount of ads that are constantly opened in new tabs.

Read more “Powered By Advertisements”

What is Win 7 Antispyware 2012 & Vista Antivirus 2012?

Win 7 Antispyware 2012, Vista Antivirus 2012, and XP Security 2012 are all names for the same rogue anti-spyware program. This family of rogues is promoted in two ways. The first is through the use of fake online antivirus scanners that state that your computer is infected and then prompt you to download a file that will install the infection. The other method are hacked web sites that attempt to exploit vulnerabilities in programs that you are running on your computer to install the infection without your knowledge or permission. Regardless of how it is installed, once it is running on your computer it will install itself as a variety of different program names and graphical user interfaces depending on the version of Windows that is running. Regardless of the name, though, they are all ultimately the same program with just a different skin on it. This rogue goes by different program names, which I have listed below based upon the version of Windows that it is installed on:

Read more “Win 7 Antispyware 2012 and Vista Antivirus 2012 name changing rogue”

If you are using Malwarebytes and receive a Malicious Website Blocked alert that has a corresponding process of C:\Windows\System32\Svchost.exe associated with it, there is a good chance that your computer is configured with a malicous DNS server. A computer’s DNS servers are typically changed to malicious ones through two methods. The first being that you have a unwanted programs called DNS Unlocker, TopFlix, AnyFlix, Cloudscout, or DNS Keeper installed, which change your DNS settings to ones under their control. The other possibility is that your router’s DNS settings have been modified.

Read more “How to fix Malicious Website Blocked Alerts from Svchost.exe”