Security news and information

I think I caught my boys stomach virus so I will keep this short so I can hit the sack before I vomit again.  AntiVermins, the latest widespread infection in the rogue anti-spyware products, has renamed itself to AntiVerminser.  It’s amazing the names these people come up with.

As usual, they rename a few things but still leave the original name all over the app as you can see below.

With the rename came a brand new infector:

C:\Windows\System32\gwquvw.dll

We have updated our removal guide here:

How To Remove Antivermins Or Antiverminser (removal Instructions)

Tags: No Tags

Last month Sunbelt broke the news about a new Rogue anti-spyware product called SpyMarshal.  This program is just like all the rest.  Comes bundled with malware, hijacks your DNS settings, displays fake alerts all as a scare tactic to have you purchase the commercial version of this software.

Analysis from some of the Bleeping Computer HJT Team has also shown that SpyMarshal has come bundled with a rootkit as shown in the Gmer image below.

Please be patient while we create a self-help guide for the removal of SpyMarshal.  For now, though, if you are infected with this malware please post a HijackThis log in our forums.  Instructions on how to do so can be found here:

Preparation Guide For Use Before Posting A Hijackthis Log

Tags: rootkit spymarshal