The malicious element pushes fake search results, desktop icons and spy apps

Jul 11, 2012 11:11 GMT  ·  By

Rogue software that allegedly cleans up virus or spyware infections has been seen for quite some time now, but more recent versions integrate a few tricks that make them stand out of the bunch. Researchers have identified such a piece of scareware and named it “Adware – Loserbar.”

Usually, these attacks are simple. When users visit a website, they’re tricked into installing a piece of malicious code onto their computers.

Then, the malware begins displaying all sorts of fake alerts that warn the victim of infections and system errors. In order to clean or fix the device, the unsuspecting internaut must purchase a miracle product that can allegedly address the problem.

However, a new variant discovered by Webroot experts does much more than that.

First of all, it attaches itself to Windows Explorer and when certain folders are accessed, it triggers a dialog box informing that an adult movie has been downloaded.

Furthermore, when the victim opens a web browser, he/she is automatically taken to a fake Google page displaying the results of a search for “IE Security ZlobTrojan32.”

This shady result page not only warns of a virus infection, but it also brings up links to adult videos.

In the meantime, a number of six shortcut icons appear on the infected computer’s desktop: VIP Casino, Cheap Pharmacy Online, MP3 Download, Cheap Software, Search Online, and SMS TRAP.

Each of them points to websites that cheap music and other types of shady content. The cherry on top of the cake is a site that advertises a mobile spy app.

Finally, the classic pop-up appears, telling the victims that their machine is infected with “some dangerous viruses” and that their “personal data is at the reach of anyone’s hand.”

In case you identify such behavior or if you spot the six icons on your desktop, be sure to immediately deploy a trustworthy antivirus solution. Whatever you do, don’t install the anti-spyware software recommended by the crooks.