<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>elamb &#187; spyware scumbags</title>
	<atom:link href="http://elamb.org/category/spyware-scumbags/feed/" rel="self" type="application/rss+xml" />
	<link>http://elamb.org</link>
	<description>information system security, risk management, scam research</description>
	<lastBuildDate>Mon, 28 Nov 2011 02:27:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>How to Clean up Windows Spyware Infestation</title>
		<link>http://elamb.org/how-to-clean-up-windows-spyware-infestation/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=how-to-clean-up-windows-spyware-infestation</link>
		<comments>http://elamb.org/how-to-clean-up-windows-spyware-infestation/#comments</comments>
		<pubDate>Tue, 19 Jun 2007 13:50:48 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
				<category><![CDATA[Main Digg]]></category>
		<category><![CDATA[spyware scumbags]]></category>
		<category><![CDATA[tutorials/tools]]></category>

	<!-- AutoMeta Start -->
	<category>infestation</category>
	<category>atwood</category>
	<category>systeminternals</category>
	<category>horror</category>
	<category>jeff</category>
	<category>coding</category>
	<category>spyware</category>
	<category>detail</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/how-to-clean-up-windows-spyware-infestation/</guid>
		<description><![CDATA[Jeff Atwood at Coding Horror put together a detail Howto on getting rid of Spyware infestation using something called &#8220;systeminternals&#8220;.]]></description>
			<content:encoded><![CDATA[<p>Jeff Atwood at Coding Horror put together a detail Howto on getting rid of Spyware infestation using something called &#8220;<a href="http://www.codinghorror.com/blog/archives/000888.html">systeminternals</a>&#8220;.  </p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/how-to-clean-up-windows-spyware-infestation/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Hacked Ad Seen on MySpace Served Spyware to a Million</title>
		<link>http://elamb.org/hacked-ad-seen-on-myspace-served-spyware-to-a-million/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=hacked-ad-seen-on-myspace-served-spyware-to-a-million</link>
		<comments>http://elamb.org/hacked-ad-seen-on-myspace-served-spyware-to-a-million/#comments</comments>
		<pubDate>Thu, 20 Jul 2006 21:05:30 +0000</pubDate>
		<dc:creator>elamb</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/hacked-ad-seen-on-myspace-served-spyware-to-a-million/</guid>
		<description><![CDATA[&#8220;An online banner advertisement that ran on MySpace.com and other sites over the past week used a Windows security flaw to infect more than a million users with spyware when people merely browsed the sites with unpatched versions of Windows, &#8230; <a href="http://elamb.org/hacked-ad-seen-on-myspace-served-spyware-to-a-million/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>&#8220;An online banner advertisement that ran on MySpace.com and other sites over the past week used a Windows security flaw to infect more than a million users with spyware when people merely browsed the sites with unpatched versions of Windows, according to data collected by iDefense, a Verisign company.&#8221;</p>
<p><a href="http://blog.washingtonpost.com/securityfix/2006/07/myspace_ad_served_adware_to_mo.html">read more</a>Â |Â <a href="http://digg.com/security/Hacked_Ad_Seen_on_MySpace_Served_Spyware_to_a_Million">digg story</a></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/hacked-ad-seen-on-myspace-served-spyware-to-a-million/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Warning Your Computer is In Danger</title>
		<link>http://elamb.org/warning-your-computer-is-in-danger/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=warning-your-computer-is-in-danger</link>
		<comments>http://elamb.org/warning-your-computer-is-in-danger/#comments</comments>
		<pubDate>Thu, 23 Mar 2006 13:04:21 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=491</guid>
		<description><![CDATA[&#8220;Windows Security Center has detected spyware/adware infection! It is strongly recommended to use special antispyware tools to prevent data lass. Click here to install the latest protection tools!&#8221; I picked this one up from one of my favorite haunts, warez/serial &#8230; <a href="http://elamb.org/warning-your-computer-is-in-danger/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.elamb.org/hacked/computerindanger.htm"><img alt="Warning Your Computer is in Danger" src="///D:/sites/hacked/images/computerindanger.jpg" border="0" height="133" width="335"></a></p>
<div><a href="http://www.elamb.org/hacked/computerindanger.htm"><img src="http://www.elamb.org/hacked/images/computerindanger.jpg"></a>
</div>
<p>&#8220;Windows Security Center has detected spyware/adware infection! It is strongly recommended to use special antispyware tools to prevent data lass. Click here to install the latest protection tools!&#8221;</p>
<p></p>
<p>I picked this one up from one of my favorite haunts, warez/serial cracks.&nbsp; Those sites are teaming with fresh malware.</p>
<p></p>
<p><a href="http://www.elamb.org/hacked/computerindanger.htm">How do you go about removing these cute little pop ups?</a> </p>
<p></p>
<p>Tags: <a rel="tag" href="http://technorati.com/tag/malware">malware</a>, <a rel="tag" href="http://technorati.com/tag/trojan">trojan</a>, <a rel="tag" href="http://technorati.com/tag/virus">virus</a>, <a rel="tag" href="http://technorati.com/tag/remove+malware">remove malware</a></p>
<p></p>
<p></p>
<p><em>Powered by</em> <a href="http://www.qumana.com/">Qumana</a></p>
<p></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/warning-your-computer-is-in-danger/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>What is VCClient &amp; VCMain?</title>
		<link>http://elamb.org/what-is-vcclient-vcmain/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=what-is-vcclient-vcmain</link>
		<comments>http://elamb.org/what-is-vcclient-vcmain/#comments</comments>
		<pubDate>Sun, 19 Mar 2006 01:21:08 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=487</guid>
		<description><![CDATA[What is VCClient / VCmain? VCClient and VCmain are assocciated with Surf Sidekick. You can get more information on Surf Sidekick at www.surfsidekick.com. VCClient actually delivers ads to your computer. It will be loaded in: C:\Program Files\Common Files\VCClient\VCClient.exe VCClient disabled &#8230; <a href="http://elamb.org/what-is-vcclient-vcmain/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p><font color="#cccccc"><br />
<h2>
What is VCClient / VCmain?</h2>
<p>VCClient and VCmain are assocciated with Surf Sidekick.  You can get more<br />
      information on Surf Sidekick at www.surfsidekick.com. VCClient actually<br />
      delivers ads to<br />
your computer.</p>
<p>It will be loaded in:</p>
<p><font color="#ff9900">C:\Program Files\Common Files\VCClient\VCClient.exe</font></p>
<p>VCClient disabled the Task Manager on my system.</p>
<p>Pr<font color="#ffcc00">oblems you may see:</font></p>
<p></font></p>
<blockquote>
<ul>
<li>Pop-up upon logon about &#8220;VCMain.exe&#8221; and &#8220;VCClient.exe&#8221;</li>
</ul>
</blockquote>
<blockquote>
<ul>
<li>Sluggish PC performance </li>
</ul>
<ul>
<li>Solicitations to purchase false spyware/malware removal software </li>
</ul>
<ul>
<li>Errors followed by PC shutdown<br />
          Can not access the Internet or any other programs</li>
</ul>
<p>Here are some trojan applications email data from my computer to external sources.&nbsp; These came loaded with VCClient:<br /><img src="http://www.elamb.org/vcclient_netstat.jpg"></p></blockquote>
<p><font color="#cccccc"></p>
<p><font color="#ffcc00"><a href="http://www.elamb.org/hacked/vcclient.htm">How to Remove VCCLient HERE..</a><br /></font></p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/what-is-vcclient-vcmain/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to get rid of SpySheriff:</title>
		<link>http://elamb.org/how-to-get-rid-of-spysheriff/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=how-to-get-rid-of-spysheriff</link>
		<comments>http://elamb.org/how-to-get-rid-of-spysheriff/#comments</comments>
		<pubDate>Fri, 10 Feb 2006 07:28:13 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=458</guid>
		<description><![CDATA[&#8220;I have a malware infection on my laptop, i go into safe mode and look into the files and the virus file comes up as spysheriff with an icon.&#8221; How do i get rid of it? Is it easy to &#8230; <a href="http://elamb.org/how-to-get-rid-of-spysheriff/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>
&#8220;I have a malware infection on my laptop, i go into safe mode and look into<br />
the files and the virus file comes up as spysheriff with an icon.&#8221;</p>
<div>
How do i get rid of it?<br />
Is it easy to get rid of?<br />
How did i come accross it?
</div>
<p>
*******************************************************</p>
<p>How to get rid of it?</p>
<p>Check out my site:<br />
<a href="http://elamb.blogharbor.com/hacked/removespysheriff.htm"><br />
http://elamb.blogharbor.com/hacked/removespysheriff.htm</a></p>
<p>If you have already, try this:<br />
<a href="http://www.bleepingcomputer.com/forums/How_to_remove_SpySheriff_Winstallexe_Spysheriffexe-t22402.html"><br />
http://www.bleepingcomputer.com/forums/How_to_remove_SpySheriff_Winstallexe_Spysheriffexe-t22402.html</a></p>
<p>The Easiest Way to get rid of it:<br />
Another way you may be able to remove it is to do a system restore:<br />
<a href="http://www.elamb.org/hacked/systemerror384.htm"><br />
http://www.elamb.org/hacked/systemerror384.htm</a></p>
<p>This is what I had to do because I had stuff going on even in Safe Mode.</p>
<p>How did I get it?<br />
I was surfing some serial/crack/warez sites.&nbsp; They are absolutely<br />
INFESTED with malware. Some porn sites are bad, but warez sites seem to<br />
be the worst.</p>
<p>
On way to Prevent it is to use FireFox:<br />
See top of this blog.</p>
<p><b><!--google_ad_client = "pub-4928750891199759";google_ad_width = 120;google_ad_height = 60;google_ad_format = "120x60_as_rimg";google_cpa_choice = "CAAQ9-OZzgEaCNTy02nFo3CrKI-293M";//--><br />
</b></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/how-to-get-rid-of-spysheriff/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Detected Spyware! System error #384</title>
		<link>http://elamb.org/detected-spyware-system-error-384/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=detected-spyware-system-error-384</link>
		<comments>http://elamb.org/detected-spyware-system-error-384/#comments</comments>
		<pubDate>Sun, 05 Feb 2006 13:28:35 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
		<br />
<b>Warning</b>:  Invalid argument supplied for foreach() in <b>/home/elamb_security/elamb.org/wp-content/plugins/autometa/autometa.php</b> on line <b>300</b><br />
		<category><![CDATA[Howto]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>
		<category><![CDATA[tutorials]]></category>

	<!-- AutoMeta Start -->
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=457</guid>
		<description><![CDATA[This is a bogus error screen that replaces your browser&#39;s home page. The message Reads: Detected Spyware! System error #384 Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is &#8230; <a href="http://elamb.org/detected-spyware-system-error-384/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p align="center"><a href="http://www.elamb.org/hacked/systemerror384.htm"><img alt="detected spyware system error #384" src="http://www.elamb.org/hacked/images/detectedspysheriff.jpg" height="381" width="510"></a></p>
<p>This is a bogus error screen that replaces your browser&#39;s home page. The message Reads: </p>
<blockquote>
<p align="left"><strong>Detected Spyware! System error #384</strong></p>
<p align="left">Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is collecting the information about the sites you&#39;ve visited and the files contained in the folder Temporary Internet Files. Attention! Ask for help of install the software for deleting secret information about the sites you visited.</p>
<p align="left">You computer is full of evidences!</p>
</blockquote>
<p><em>More than likely, this message is just the tip of the iceberg. Using simple <a href="http://www.elamb.org/hacked/IDTools.htm">intrusion detection tools</a> you will see that your system has scores of viruses, trojans, worms and other malware installed on it. The message is trying to get you to purchase some <a href="http://www.elamb.org/hacked/removespysheriff.htm">scamware</a>.</em></p>
<p>&nbsp;</p>
<h3>How to remove the &#8220;Detected Spyware! System error #384&#8243; message and all the malware on your system?</h3>
<p>There are actually a few relatively easy ways for removing this malware:</p>
<blockquote>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm#removedetectedspyware">USE FREE (LEGITIMATE) ANTI-SPYWARE</a></p>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm#Systemrestore">PERFORM A SYSTEM RESTORE</a></p>
<p>COMPLETELY RE-INSTALL WINDOWS (self explanatory, and <strong>complete overkill</strong> unless you have rootkit on your system or something crazy like that.)</p>
</blockquote>
<p><a href="http://www.elamb.org/hacked/systemerror384.htm"><strong>READ MORE HERE&#8230;</strong></a></p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/detected-spyware-system-error-384/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Warning! Spyware detected on your computer!</title>
		<link>http://elamb.org/warning-spyware-detected-on-your-computer/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=warning-spyware-detected-on-your-computer</link>
		<comments>http://elamb.org/warning-spyware-detected-on-your-computer/#comments</comments>
		<pubDate>Thu, 02 Feb 2006 12:24:51 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
				<category><![CDATA[I got hacked]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spy sheriff]]></category>
		<category><![CDATA[spyware scumbags]]></category>

	<!-- AutoMeta Start -->
	<category></category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=456</guid>
		<description><![CDATA[LOOK, MA. NO SECURITY! Ever get one of these bad boys!?&#160; Warning! Spyware detected on your computer!Install an antivirus or spyware remover to clean your computerView the list of top spyware removers here. Take a guess where this link on &#8230; <a href="http://elamb.org/warning-spyware-detected-on-your-computer/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>LOOK, MA. NO SECURITY!</p>
<div><a href="http://www.elamb.org/hacked/warningspyware.htm"><img src="http://www.elamb.org/hacked/images/spydesk.jpg"></a></p>
<div>Ever get one of these bad boys!?&nbsp; </p>
<div><a href="http://www.elamb.org/hacked/warningspyware.htm">Warning! Spyware detected on your computer!<br />Install an antivirus or spyware remover to clean your computer<br />View the list of top spyware removers here.</a></p>
<p>Take a guess where this link on my desktop leads.</p></div>
</div>
</div>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/warning-spyware-detected-on-your-computer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&quot;Windows has detected spyware infection!&quot;</title>
		<link>http://elamb.org/windows-has-detected-spyware-infection/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-has-detected-spyware-infection</link>
		<comments>http://elamb.org/windows-has-detected-spyware-infection/#comments</comments>
		<pubDate>Tue, 13 Dec 2005 23:53:51 +0000</pubDate>
		<dc:creator>elamb.security</dc:creator>
				<category><![CDATA[Broadband Internet Security]]></category>
		<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Computer Security/Home Computer Security]]></category>
		<category><![CDATA[Computer Security/Home Computer Security/Home Computer ]]></category>
		<category><![CDATA[I got hacked]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Malware/Malware Removal]]></category>
		<category><![CDATA[Malware/Trojans]]></category>
		<category><![CDATA[Malware/Virus]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[spyware scumbags]]></category>
		<category><![CDATA[spyware]]></category>
		<category><![CDATA[windows detected spyware infection]]></category>

	<!-- AutoMeta Start -->
	<category>infection</category>
	<category>detected</category>
	<category>antispyware</category>
	<category>spyware</category>
	<category>infected</category>
	<category>infected</category>
	<category>annoying</category>
	<category>windows</category>
	<!-- AutoMeta End -->
	
		<guid isPermaLink="false">http://elamb.org/?p=378</guid>
		<description><![CDATA[Want to know how to get rid of the &#8220;Windows has detected spyware infection!&#8220; &#160; &#8220;Your computer is infected! [tag]Windows has detected spyware infection[/tag]! It is recommended to use special antispyware tools to prevent data loss Windows will now download &#8230; <a href="http://elamb.org/windows-has-detected-spyware-infection/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<div><a href="http://elamb.org/hacked/detectedspyware.htm"><img src="http://www.elamb.org/hacked/images/computerinfected.jpg"></a></div>
</p>
<p align="left">Want to know how to get rid of the &#8220;<a href="http://elamb.org/hacked/detectedspyware.htm">Windows has detected spyware infection!</a>&#8220;</p>
<p>&nbsp;
</p>
<div>&#8220;Your computer is infected! [tag]Windows has detected spyware infection[/tag]!<br />
        It is recommended to use special antispyware tools to prevent data loss Windows<br />
          will now download the most up to date antispyware for you.<br />
Click here to protect your computer from [tag]spyware[/tag]!&#8221;</p>
</div>
<p>Here is how to delete that annoying &#8220;<a href="http://elamb.org/hacked/detectedspyware.htm">computer is infected</a>&#8221; message.</p>
<blockquote></blockquote>
<p>If your seeing this message your system really is infected with some [tag]malware[/tag] (virus, trojan, spyware) and that message you see is a part of the malware.  This type of malware typically is trying to get you to purchase a product to clean your system.  When you click on the link they provide, it takes you to the very source of the malware on your system.  It is supposed to look like some of the Window system messages you can get about updates.  DON&#8217;T fall for it.</p>
<p><strong>DO NOT GIVE THESE PEOPLE YOUR CREDIT CARD INFORMATION!</strong></p>
<p><a href="http://elamb.org/hacked/detectedspyware.htm">This page</a> will give your more information on what it is and how to get rid of it.</p>
]]></content:encoded>
			<wfw:commentRss>http://elamb.org/windows-has-detected-spyware-infection/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

