Christian Mairoll 237 Posted November 6, 2009 Report Share Posted November 6, 2009 The Emsi Software malware research team has discoverd a new outbreak of the BlockProtector adware. a-squared Anti-Malware detects this malware as Adware.Win32.BlockProtector. BlockProtector is a rogue scanner program, it shows a fake security center window, shows misleading scan results and fake security alerts. The author of BlockProtector also made BlockKeeper, BlockScanner, BlockWatcher, SoftStronghold, ShieldSafeness, SoftVeteran, SoftSoldier, SoftCop, TrustFighter, TrustSoldier, SafeFighter, SecureVeteran, SafeFighter etc, so it has same user interface, same characteristics, just a different name. To further convince victims, BlockProtector will also create numerous junk files with random names on your computer that will be detected as malware when the program scans your computer, but will not allow you to remove them until you purchase it. Create new files: %ProgramFiles%BlockProtector SoftwareBlockProtectorBlockProtector.exe %ProgramFiles%BlockProtector SoftwareBlockProtectorUninstall.exe %UserProfile%Start MenuProgramsBlockProtector.lnk %UserProfile%DesktopBlockProtector.lnk %UserProfile%[email protected][1].txt Create new registry entries: HKEY_LOCAL_MACHINEsoftwareBlockProtector HKEY_LOCAL_MACHINEsoftwaremicrosoftWindowsCurrentVersionUninstallBlockProtector HKEY_CURRENT_USERsoftwareBlockProtector HKEY_LOCAL_MACHINEsoftwaremicrosoftWindowsCurrentVersionRun, “BlockProtector.exe” Screenshots: How to remove the infection of Adware.Win32.BlockProtector? To delete this malware infection, please download and install a-squared Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine. View the full article Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.