Kaspersky Labs announced that Conficker is now downloading a fake antivirus named SpywareProtect2009. Owners of infected computers can see the effects of the SpywareProtect2009 activity
Spyware Protect2009
False Warning
IE Warning
This fake AV is so annoying that there is a significant probability that innocent users will click on the offer to pay for disinfection – and thus will be defrauded of almost 50 USD. What is worse, their credit card details might also be harvested – with all sorts of nightmarish results.
In addition to launching numerous messages about infections, SpywareProtect2009 attempts to install a Trjoan-Downloader.Wind32.Fraudload.ecl onto the system. This downloader is programmed to download new versions of SpywareProtect2009. Variant .ecl is downloading these versions from alsterstor.com.
If you find yourself a victim of this or any other false antivirus such as AntiVirus 2009, AntiVirus 360, AntiVirus 2008, AntiVirus XP, Spyware Guard, etc please turn off your computer, and contact Clear Choice Computer immediately. The longer you wait the deeper the infection will get into your system, and the repair will be costlier.
