Malware Lab

Malware security alerts, detailed malware analysis reports and ransomware decrypters straight from our industry experts at the Emsisoft Malware Lab.

Jun 11, 2010

2 min read

Twitter spam and some details

We wanted to add on some details on what we found after our research in regards to the Twitter spam emails. The original Trojan dropper sample named, Twitter_security_model_setup.exe is approximately 416768 bytes, having an icon similar to Windows Update notification On further analysis we found out the sample to be a variant of TDSS rootkit, […]

Jun 8, 2010

2 min read

You’ve got Twit…err Problems!

There is a new spam going around dropping malicious binaries and variants of rogue security softwares. We got this specific email few hours ago There have been few alterations of the same email, ( More can be seen here ), and if looked closely all hyperlinked texts point to a non-twitter related url. We went […]

May 25, 2010

2 min read

Rogue software copies Emsisoft’s icon

Our previous post about rogue security softwares talked about how malware authors have been constantly imitating products of trust and huge user base, to trick users and make them buy their malwares. Microsoft’s copyrighted logos and even blue screens and startup screens are targeted, Google Search and few major AV Vendors were not left behind. […]

May 21, 2010

6 min read

Rogue Security Software – Evolution, Protection and Awareness

Internet has come of age, and with it malicious software and related infections. Viruses, Trojans and advertising software and popups have been there and the numbers have increased with time. With the advent of new century, especially in last 5 years, there has been an introduction to newer types of malicious software, namely spywares and […]

May 12, 2010

3 min read

SecurityTool isn’t a security tool

Do you see application with an icon like this on your computer? If yes, it means that your computer maybe infected by SecurityTool! This is the icon that is often used by the rogue application named SecurityTool. This rogue application was never dead. Since the year 2009 until today, SecurityTool still continue to attack computer […]

Dec 2, 2009

2 min read

Oh the virtual world!

Rogue Antiviruses have come a long way from their simple User Interfaces and scare threats. Alpha Antivirus is a rogue application that comes with something more, which is how to make life of a virus analyst difficult. The product comes with Virtual Machine protection which simply means that this malware cannot run on virtual environments […]

Nov 17, 2009

3 min read

Warning of the new “Russian Connection”: Million dollar hoax from the Kremlin!

Who doesn't want to be a millionaire? The so-called "Nigeria Connection" takes advantage of such dreams and has been making good money for years with pumped-up emails. The security software development specialists Emsi Software are now warning of a new "Russian Connection". The millions are now being promised from the Kremlin.

Mar 25, 2009

8 min read

At least an honest scammer: Insider Chat with Nigeria Connection!

The Nigeria Connection is still earning millions each year with a very simple email scam: Users all over the world are asked to help smuggle huge sums of money out of Africa via their bank accounts in return for large commissions. Anyone taking up this offer ends up poorer and not richer for the experience. […]

Nov 11, 2008

6 min read

On the sense and senselessness of Malware cleaning

Whether it even makes sense to clean infected computers is a topic of repeated heated discussion in the IT security world. Questions such as “Can I ever really trust a computer again once it has been infected?” or “Is it technically possible to completely clean a system?” always come to the forefront of these discussions. […]

Sep 23, 2008

4 min read

Side blows of a new threat: Rogue Anti-Spyware

Hackers and malware programmers have always been very creative about finding news ways to attack your computer. The point of this is not to always try to identify new vulnerabilities (exploits) or to infiltrate your computer with trojans, nor to develop more efficient methods by which the malware can be hidden. At the moment, fake […]

Emsisoft > Blog > Malware Lab > Page 47

Malware Lab

Twitter spam and some details

You’ve got Twit…err Problems!

Rogue software copies Emsisoft’s icon

Rogue Security Software – Evolution, Protection and Awareness

SecurityTool isn’t a security tool

Oh the virtual world!

Warning of the new “Russian Connection”: Million dollar hoax from the Kremlin!

At least an honest scammer: Insider Chat with Nigeria Connection!

On the sense and senselessness of Malware cleaning

Side blows of a new threat: Rogue Anti-Spyware

Newsletter