Friday, April 28, 2006

New variant of SpyFalcon in the wild

SpyFalcon is a fake antivirus application that displays system tray icons telling the user that their system is infected when it isn’t. It offers a link to a download to remove these imaginary viruses / spyware. Clicking on that message takes the user to a website that distributes SpyFalcon.

SpyFalcon also makes other changes to the system:

Change the Internet Explorer default page

Redirect the browser to malicious web sites

Instructions on removing this can be found here.

No comments: