Rapid Antivirus

[Malekal_morte]

Rapid Antivirus est un rogue (faux anti-spyware) qui s'installe sans permission, le malware affiche de fausses alertes vous indiquant que vous êtes infecté par un spyware et vous recommande d'acheter ce faux anti-spyware pour soit disant désinfecter votre ordinateur.



Quelques exemples de captures des Fausses pages de scan/alerte de sécurité

[Malekal_morte]

Une infection fait la promotion de ce rogue actuellement...

Celle-ci affiche de temps en temps un faux écran bleu d'erreur

SPYWARE.INFOSTEALER_BZUP.BF_0x0000001E avec le message Technical Information:
*** STOP: 0x000000D1 (0xAE039E16, 0x000000FF, 0x00000001, 0x8000C1DE)
in DMLOAD.SYS

L'infection fait croire ensuite à un redémarrage de Windows avec un petit message vous indiquant que vous avez une version non enregistrée de Rapid Antivirus.


STOP! Windows Security System

L'infection affiche comme d'habitude une icône ballon avec des bulles contenant de faux messages d'alerte vous indiquant que vous êtes infecté....


et bien sûr des popups...


Avec les messages suivants :

Excessive SMTP email traffic has been detected. Probable spambot infection. Do you wish to scan for spambot type malware now? (recommended)
Attention! Windows Firewall Warning

Critical System Warning! Your system is probably infected with a version of Spyware.IEPass.thief. This may result in website access passwords being stolen from Internet Explorer, Mozilla Firefox, Outlook etc. Click Yes to scan and remove threats. (recommended)

Attn! Critical System Warning

Spyware activity detected. System halted. Please perform a full system scan for viruses and spyware infections to prevent threat spreading. Start scan now?

WARNING! Security Warning

Windows system files have been compromised. Probable cause: malware infection. Replace modified files with backup copies and perform a scan for malware?

WARNING! System Files Corrupted
Security errors detected. Remove these errors as soon as possible to prevent data loss and private information exposure. Click here to install protection too
ls now.

HALT! Attack Detected!

Zlob.P0rn.Ad adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Pleas
e click here to locate and remove this threat now.

WARNING: Security error!

Network connection is now restricted. Abnormal network activity detected. Probable cause: spyware infection. Click here to perform system security audit.
Error! Check connection!

CPU performance has degraded significantly. Probable cause: malware infection. Click here to perform system security audit.

Attention! Low Performance!

A spyware application has been detected and Windows has been shut down to prevent damage to your computer
If this is first time you've seen this error screen, restart you computer. If this screen appears again, follow these steps:
Windows detected an unregistered copy of Rapid Antivirus Security Suite on your computer. If problem continue, activate your antivirus software no
prevent computer damage and data loss.

Check to make sure your antivirus software is properly set up and configured
If this is a new installation, ask your software vendor or manufacturer
for any protection updates you might need.