<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Webroot Threat Blog &#187; Rogue Security Products</title>
	<atom:link href="http://blog.webroot.com/category/rogue-security-products/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.webroot.com</link>
	<description>WEBROOT - INSIGHTS INTO THREATS AND TRENDS FROM OUR INTERNET SECURITY EXPERTS</description>
	<lastBuildDate>Sat, 11 Feb 2012 02:04:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='blog.webroot.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://0.gravatar.com/blavatar/2f6f528880dcd9039e50bf3a1b6b8a40?s=96&#038;d=http%3A%2F%2Fs2.wp.com%2Fi%2Fbuttonw-com.png</url>
		<title>Webroot Threat Blog &#187; Rogue Security Products</title>
		<link>http://blog.webroot.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://blog.webroot.com/osd.xml" title="Webroot Threat Blog" />
	<atom:link rel='hub' href='http://blog.webroot.com/?pushpress=hub'/>
		<item>
		<title>How malware authors evade antivirus detection</title>
		<link>http://blog.webroot.com/2012/01/18/how-malware-authors-evade-antivirus-detection/</link>
		<comments>http://blog.webroot.com/2012/01/18/how-malware-authors-evade-antivirus-detection/#comments</comments>
		<pubDate>Thu, 19 Jan 2012 01:37:16 +0000</pubDate>
		<dc:creator>ddanchev</dc:creator>
				<category><![CDATA[Backdoors]]></category>
		<category><![CDATA[Dialers]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[Phishing Trojans]]></category>
		<category><![CDATA[Ransomware]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[rootkit]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[antivirus]]></category>
		<category><![CDATA[Quality Assurance]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=5824</guid>
		<description><![CDATA[By Dancho Danchev Aiming to ensure that their malware doesn&#8217;t end up in the hands of vendors and researchers, cybercriminals are actively experimenting with different quality assurance processes whose objective is to increase the probability of their campaigns successfully propagating in the wild without detection. Some of these techniques include multiple offline antivirus scanning interfaces [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=5824&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2012/01/18/how-malware-authors-evade-antivirus-detection/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">ddanchev</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2012/01/kims_multiple_antivirus_scanner_01.jpg" medium="image">
			<media:title type="html">Kims_Multiple_Antivirus_Scanner_01</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2012/01/kims_multiple_antivirus_scanner_02.jpg" medium="image">
			<media:title type="html">Kims_Multiple_Antivirus_Scanner_02</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2012/01/kims_multiple_antivirus_scanner_03.jpg" medium="image">
			<media:title type="html">Kims_Multiple_Antivirus_Scanner_03</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2012/01/kims_multiple_antivirus_scanner_04.jpg" medium="image">
			<media:title type="html">Kims_Multiple_Antivirus_Scanner_04</media:title>
		</media:content>
	</item>
		<item>
		<title>Criminals Abuse Amazon Hosting with Rogues, Ransomware</title>
		<link>http://blog.webroot.com/2011/07/20/criminals-abuse-amazon-hosting-with-rogues-ransomware/</link>
		<comments>http://blog.webroot.com/2011/07/20/criminals-abuse-amazon-hosting-with-rogues-ransomware/#comments</comments>
		<pubDate>Wed, 20 Jul 2011 18:21:09 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Advanced Malware Removal]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Ransomware]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[79kjs.ru]]></category>
		<category><![CDATA[Amazon]]></category>
		<category><![CDATA[Amazon.com]]></category>
		<category><![CDATA[Cloudfront]]></category>
		<category><![CDATA[Latvenergo]]></category>
		<category><![CDATA[XP Security 2012]]></category>
		<category><![CDATA[xrvid-porno.com]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4698</guid>
		<description><![CDATA[By Andrew Brandt The criminals who push rogues at the world don&#8217;t really care about the reputations of the ISPs or Web hosting services they abuse. They leap from free service to free service until they&#8217;ve thoroughly worn out their welcome and, in some cases, destroyed the reputation of the service they abused. But they [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4698&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/07/20/criminals-abuse-amazon-hosting-with-rogues-ransomware/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2004.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2014.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2024.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2034.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2044.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2054.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2064.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2074.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2084.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2094.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2104.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2010/08/gs2114.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_amazonnetworktraffic_crop.png" medium="image">
			<media:title type="html">20110719_rogue_amazonnetworktraffic_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_networktraffic_domains-crop.png" medium="image">
			<media:title type="html">20110719_rogue_networktraffic_domains-crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_domain-courtesy-of-robtex-com_crop.png" medium="image">
			<media:title type="html">20110719_rogue_domain-courtesy-of-robtex.com_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_icons.png" medium="image">
			<media:title type="html">20110719_rogue_icons</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_ransomware-dl.png" medium="image">
			<media:title type="html">20110719_rogue_ransomware-dl</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_xp-security-2012.png?w=300" medium="image">
			<media:title type="html">20110719_rogue_xp-security-2012</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/07/20110719_rogue_ransomscreen_crop.png" medium="image">
			<media:title type="html">20110719_rogue_ransomscreen_crop</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Windows Troubles Killer / Salvage System: Rogue of the Week</title>
		<link>http://blog.webroot.com/2011/06/20/windows-troubles-killer-salvage-system-rogue-of-the-week/</link>
		<comments>http://blog.webroot.com/2011/06/20/windows-troubles-killer-salvage-system-rogue-of-the-week/#comments</comments>
		<pubDate>Mon, 20 Jun 2011 17:51:54 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Destructive behavior]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[%appdata%\Microsoft]]></category>
		<category><![CDATA[consentpromptbehavioradmin]]></category>
		<category><![CDATA[consentpromptbehavioruser]]></category>
		<category><![CDATA[disable System Restore]]></category>
		<category><![CDATA[disable UAC]]></category>
		<category><![CDATA[disable User Account Controls]]></category>
		<category><![CDATA[disablesr]]></category>
		<category><![CDATA[enablelua]]></category>
		<category><![CDATA[IFEO]]></category>
		<category><![CDATA[image file execution options]]></category>
		<category><![CDATA[net stop msmpsvc]]></category>
		<category><![CDATA[NirSoft CurrProcess]]></category>
		<category><![CDATA[PrcView]]></category>
		<category><![CDATA[Process Hacker]]></category>
		<category><![CDATA[Safe Boot]]></category>
		<category><![CDATA[TRxSH]]></category>
		<category><![CDATA[User Account Controls]]></category>
		<category><![CDATA[warnonhttpstohttpredirect]]></category>
		<category><![CDATA[Windows Salvage System]]></category>
		<category><![CDATA[Windows Troubles Killer]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4573</guid>
		<description><![CDATA[By Stephen Ham and Andrew Brandt This week&#8217;s rogue, once again, mimics a system utility and not merely an antivirus product. Either way, the scam is the same: Convince the victim that their computer is broken, then coerce them to pay for useless snake oil. These rogue system utilities go by the names Windows Troubles [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4573&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/06/20/windows-troubles-killer-salvage-system-rogue-of-the-week/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2002.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2012.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2022.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2032.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2042.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2052.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2062.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2072.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2082.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2092.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2102.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2112.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_both_logo.png" medium="image">
			<media:title type="html">Windows Troubles Killer / Windows Salvage System logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_alert_crop.png" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_alert_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-trouble-killer_programicon1.png" medium="image">
			<media:title type="html">20110617_rotw_windows-trouble-killer_programicon</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_scanning.png?w=300" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_scanning</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_vmware-tools-alert_crop_comment.png" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_vmware-tools-alert_crop_comment</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-trouble-killer_blocks-procexp_crop.png" medium="image">
			<media:title type="html">20110617_rotw_windows-trouble-killer_blocks-procexp_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_safe-boot.png" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_safe-boot</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_ifeo-key.png" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_IFEO-key</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110617_rotw_windows-salvage-system_terminate-msmpsvc.png" medium="image">
			<media:title type="html">20110617_rotw_windows-salvage-system_terminate-msmpsvc</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Fake UPS Document Installs Fake Microsoft Patch Payload</title>
		<link>http://blog.webroot.com/2011/06/17/fake-ups-document-installs-fake-microsoft-patch-payload/</link>
		<comments>http://blog.webroot.com/2011/06/17/fake-ups-document-installs-fake-microsoft-patch-payload/#comments</comments>
		<pubDate>Fri, 17 Jun 2011 15:12:24 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Backdoors]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Downloaders]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Keyloggers]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[153 James Street]]></category>
		<category><![CDATA[153 James Street Suite 100 Long Beach CA 90000]]></category>
		<category><![CDATA[90000]]></category>
		<category><![CDATA[And it will arrive within 3 buisness days.]]></category>
		<category><![CDATA[clickcareful.org]]></category>
		<category><![CDATA[findsmell.org]]></category>
		<category><![CDATA[findstation.org]]></category>
		<category><![CDATA[Hiloti]]></category>
		<category><![CDATA[Long Beach CA]]></category>
		<category><![CDATA[miliardov.com]]></category>
		<category><![CDATA[Paymentsadd.com]]></category>
		<category><![CDATA[pusk3.exe]]></category>
		<category><![CDATA[searchbreeze.org]]></category>
		<category><![CDATA[SpyEye]]></category>
		<category><![CDATA[Suite 100]]></category>
		<category><![CDATA[svchost.exe]]></category>
		<category><![CDATA[The parcel was sent to your home adress.]]></category>
		<category><![CDATA[Trojan-Downloader-Tukpat]]></category>
		<category><![CDATA[trol.exe]]></category>
		<category><![CDATA[trol2.exe]]></category>
		<category><![CDATA[UPS_Document.exe]]></category>
		<category><![CDATA[UPS_document.zip]]></category>
		<category><![CDATA[variantov.com]]></category>
		<category><![CDATA[Windows Recovery]]></category>
		<category><![CDATA[Windows XP Restore]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4543</guid>
		<description><![CDATA[By Andrew Brandt As if we didn&#8217;t have enough to deal with this week &#8212; after a Microsoft patch Tuesday that brought with it a boatload of security updates for Windows, Office, Silverlight, Visual Studio, and other programs &#8212; some enterprising malware distributor is emailing around bogus tracking number malware dressed up in the icon [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4543&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/06/17/fake-ups-document-installs-fake-microsoft-patch-payload/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_installer-and-payloads_icons.png" medium="image">
			<media:title type="html">20110615_fakeups_installer-and-payloads_icons</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_spamemail_crop.png" medium="image">
			<media:title type="html">20110615_fakeups_spamemail_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_procexp_hililte_crop.png" medium="image">
			<media:title type="html">20110615_fakeups_procexp_hililte_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_domains.png" medium="image">
			<media:title type="html">20110615_fakeups_domains</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_cnc-domains.png" medium="image">
			<media:title type="html">20110615_fakeups_cnc-domains</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_rogue_windows-xp-restore_scanwindow.png?w=300" medium="image">
			<media:title type="html">20110615_fakeups_rogue_windows-xp-restore_scanwindow</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_rogue_windows-xp-restore_bogus-payment-window_price.png" medium="image">
			<media:title type="html">20110615_fakeups_rogue_windows-xp-restore_bogus-payment-window_price</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_windows-xp-restore_error-report_crop.png" medium="image">
			<media:title type="html">20110615_fakeups_windows-xp-restore_error-report_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_fake-payment-domain.png" medium="image">
			<media:title type="html">20110615_fakeups_fake-payment-domain</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_rogue_windows-xp-restore_paymentsadd-com.png" medium="image">
			<media:title type="html">20110615_fakeups_rogue_windows-xp-restore_paymentsadd.com</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_rogue-plimus-string-crop.png" medium="image">
			<media:title type="html">20110615_fakeups_rogue-plimus-string-crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110615_fakeups_fake-whois-address-streetview.png?w=300" medium="image">
			<media:title type="html">20110615_fakeups_fake-whois-address-streetview</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Malware Load Points Raise the Complexity Bar</title>
		<link>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/</link>
		<comments>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/#comments</comments>
		<pubDate>Thu, 09 Jun 2011 16:09:16 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Ad-clickers]]></category>
		<category><![CDATA[Botnet activity]]></category>
		<category><![CDATA[Firefox]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[Search engines]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[%appdata%]]></category>
		<category><![CDATA[auto-start locations]]></category>
		<category><![CDATA[Batserv]]></category>
		<category><![CDATA[conima.exe]]></category>
		<category><![CDATA[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]]></category>
		<category><![CDATA[HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\classes\exefile\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\firefox.exe\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\iexplore.exe\shell\open\command]]></category>
		<category><![CDATA[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run]]></category>
		<category><![CDATA[load points]]></category>
		<category><![CDATA[Local Account Authority Service]]></category>
		<category><![CDATA[LocalAccountAuthority.bat]]></category>
		<category><![CDATA[lssas.exe]]></category>
		<category><![CDATA[manager.exe]]></category>
		<category><![CDATA[rogue antivirus]]></category>
		<category><![CDATA[Run Key]]></category>
		<category><![CDATA[start points]]></category>
		<category><![CDATA[Trojan-Clicker-Batserv]]></category>
		<category><![CDATA[Windows auto-start locations]]></category>
		<category><![CDATA[windows load points]]></category>
		<category><![CDATA[Windows start points]]></category>
		<category><![CDATA[Wireshark Antivirus]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4496</guid>
		<description><![CDATA[By Andrew Brandt When malware ends up on an infected machine, one of the first things it will do is to ensure that it will start up again after the victim reboots their computer. For a criminal it makes sense. After all, what good is malware that stops working after a reboot? In Windows, there [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4496&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/06/09/malware-load-points-raise-the-complexity-bar/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-service2_crop.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-service2_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-logo.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-window.png?w=300" medium="image">
			<media:title type="html">20110608_runkey_rogue-window</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-detections.png?w=300" medium="image">
			<media:title type="html">20110608_runkey_rogue-detections</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-systraywarning.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-systraywarning</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-qtupdateserv_crop.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-qtupdateserv_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_rogue-downloader_crop.png" medium="image">
			<media:title type="html">20110608_runkey_rogue-downloader_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker_install-procexp.png" medium="image">
			<media:title type="html">20110608_runkey_clicker_install-procexp</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-lssas_service.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-lssas_service</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/06/20110608_runkey_clicker-lssas_bat.png" medium="image">
			<media:title type="html">20110608_runkey_clicker-lssas_bat</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>MacProtector: Rogue of the Week</title>
		<link>http://blog.webroot.com/2011/05/27/macprotector-rogue-of-the-week/</link>
		<comments>http://blog.webroot.com/2011/05/27/macprotector-rogue-of-the-week/#comments</comments>
		<pubDate>Sat, 28 May 2011 01:00:22 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Advanced Malware Removal]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[86.55.210.102]]></category>
		<category><![CDATA[91.213.217.30]]></category>
		<category><![CDATA[avRunner.app]]></category>
		<category><![CDATA[buy-viagra-now.net]]></category>
		<category><![CDATA[gay.porn.com]]></category>
		<category><![CDATA[Mac Defender]]></category>
		<category><![CDATA[Mac Guard]]></category>
		<category><![CDATA[Mac Protector]]></category>
		<category><![CDATA[Mac Security]]></category>
		<category><![CDATA[MacProtector]]></category>
		<category><![CDATA[Macs don't get viruses]]></category>
		<category><![CDATA[You are purchasing MAC Security]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4445</guid>
		<description><![CDATA[By Andrew Brandt This week, we turn our attention temporarily away from the never-ending stream of rogue security products on the Windows platform and take a closer look at the Mac OS analogue, MacProtector (aka Mac Security, Mac Defender, MacGuard, and&#8211;if history serves&#8211;soon to be many, many other names). There&#8217;s been a lot of press [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4445&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/05/27/macprotector-rogue-of-the-week/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2003.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2013.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2023.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2033.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2043.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2053.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2063.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2073.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2083.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2093.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2103.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2113.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_macprotector-logo.png" medium="image">
			<media:title type="html">20110527_rotw-mac_macprotector-logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_downloadpop.png" medium="image">
			<media:title type="html">20110527_rotw-mac_downloadpop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_whatsmynameagain.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_whatsmynameagain</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_systeminfectedpopup.png" medium="image">
			<media:title type="html">20110527_rotw-mac_systeminfectedpopup</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_control-center_crop.png" medium="image">
			<media:title type="html">20110527_rotw-mac_control-center_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_macguard_startup.png" medium="image">
			<media:title type="html">20110527_rotw-mac_macguard_startup</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_scan-with-pops.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_scan-with-pops</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_rogueprocmon.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_rogueprocmon</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_settingsbox1.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_settingsbox</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_networktraffic.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_networktraffic</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_macdef_prices.png" medium="image">
			<media:title type="html">20110527_rotw-mac_macdef_prices</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_macguard_about-screen.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_macguard_about-screen</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_activitymonitor_crop.png?w=300" medium="image">
			<media:title type="html">20110527_rotw-mac_activitymonitor_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110527_rotw-mac_applecrop.png" medium="image">
			<media:title type="html">20110527_rotw-mac_applecrop</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Rogue of the Week: Windows Recovery</title>
		<link>http://blog.webroot.com/2011/05/19/rogue-of-the-week-windows-recovery/</link>
		<comments>http://blog.webroot.com/2011/05/19/rogue-of-the-week-windows-recovery/#comments</comments>
		<pubDate>Fri, 20 May 2011 05:56:31 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Advanced Malware Removal]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[%temp%\smtmp]]></category>
		<category><![CDATA[Hard Drive Failure]]></category>
		<category><![CDATA[HDD Rescue]]></category>
		<category><![CDATA[The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.]]></category>
		<category><![CDATA[Ultra Defragger]]></category>
		<category><![CDATA[Windows Recovery]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4401</guid>
		<description><![CDATA[By Andrew Brandt Word from the AMR group last week was that there weren&#8217;t many changes from the previous week; Many of the same rogue antivirus previously reported in this blog continue to plague the Internet. This week I decided to focus on a rogue that&#8217;s recently become a problem. It goes by the name [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4401&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/05/19/rogue-of-the-week-windows-recovery/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_logo.png" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_hdfail.png" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_HDfail</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_attrib.png" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_attrib</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_moved-shortcuts.png?w=300" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_moved-shortcuts</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_initialscan.png?w=300" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_initialscan</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_errorslist.png?w=300" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_errorslist</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_console.jpg" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_console</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110519_rotw_windowsrecovery_fixing.png?w=300" medium="image">
			<media:title type="html">20110519_rotw_windowsrecovery_fixing</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Antivirus Center: Rogue of the Week</title>
		<link>http://blog.webroot.com/2011/05/10/rogue-of-the-week-antivirus-center/</link>
		<comments>http://blog.webroot.com/2011/05/10/rogue-of-the-week-antivirus-center/#comments</comments>
		<pubDate>Tue, 10 May 2011 21:59:39 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Advanced Malware Removal]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Antivirus Center]]></category>
		<category><![CDATA[Antivirus Center license terms]]></category>
		<category><![CDATA[hlp4.tmp.chm]]></category>
		<category><![CDATA[ins1.tmp]]></category>
		<category><![CDATA[It is highly recommended that you clear your computer from all the treats immediatly]]></category>
		<category><![CDATA[mv2.tmp]]></category>
		<category><![CDATA[We highly recommend you to get license for Antivirus Center to remove immediately harmful software]]></category>
		<category><![CDATA[wrk3.tmp]]></category>
		<category><![CDATA[Your system has come under attack of harmful software]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4328</guid>
		<description><![CDATA[By Andrew Brandt and Brenden Vaughan Our Advanced Malware Removal group reported seeing several cases of a rogue called Antivirus Center this past week. The rogue isn&#8217;t new – we began seeing samples of it last year – but has re-emerged as a threat. This rogue is characterized by a close mimicry of some aspects [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4328&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/05/10/rogue-of-the-week-antivirus-center/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2003.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2013.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2023.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2033.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2043.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2053.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2063.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2073.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2083.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2093.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2103.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2113.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-logo.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-filename.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-filename</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-activation.png?w=300" medium="image">
			<media:title type="html">20110510_rotw_avcenter-activation</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-price.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-price</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-temp.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-temp</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-helpfile.png?w=300" medium="image">
			<media:title type="html">20110510_rotw_avcenter-helpfile</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-cmdline.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-cmdline</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-firewallpolicy-hilite_crop.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-firewallpolicy-hilite_crop</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-scanresults.png?w=300" medium="image">
			<media:title type="html">20110510_rotw_avcenter-scanresults</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-scanning1.png?w=300" medium="image">
			<media:title type="html">20110510_rotw_avcenter-scanning</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-clearyourtreats.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-clearyourtreats</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-systray2.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-systray2</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/05/20110510_rotw_avcenter-systray1.png" medium="image">
			<media:title type="html">20110510_rotw_avcenter-systray1</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>ROTW: &#8220;Total Security&#8221; and Antivirus IS</title>
		<link>http://blog.webroot.com/2011/04/25/rotw-total-security-and-antivirus-is/</link>
		<comments>http://blog.webroot.com/2011/04/25/rotw-total-security-and-antivirus-is/#comments</comments>
		<pubDate>Mon, 25 Apr 2011 16:00:31 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Advanced Malware Removal]]></category>
		<category><![CDATA[hijack search results]]></category>
		<category><![CDATA[Internet Explorer]]></category>
		<category><![CDATA[mal-effects]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[93.188.163.182]]></category>
		<category><![CDATA[93.188.166.182]]></category>
		<category><![CDATA[Antivirus IS]]></category>
		<category><![CDATA[Innovative protection for your PC]]></category>
		<category><![CDATA[Internet Settings ProxyEnable=1]]></category>
		<category><![CDATA[Internet Settings ProxyServer=127.0.0.1:5643]]></category>
		<category><![CDATA[PhishingFilter Enabled=0]]></category>
		<category><![CDATA[port 5643]]></category>
		<category><![CDATA[Rogues of the week]]></category>
		<category><![CDATA[total security]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4277</guid>
		<description><![CDATA[By Brenden Vaughan and Andrew Brandt This week, our support and advanced malware removal (AMR) team did not have a lot of new data to report about rogue security products. The most commonly encountered infection continues to be one of the rogues we reported about last week. While we may refer to it as XP [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4277&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/04/25/rotw-total-security-and-antivirus-is/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		<georss:point>39.923932 -105.118490</georss:point>
		<geo:lat>39.923932</geo:lat>
		<geo:long>-105.118490</geo:long>
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2004.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2014.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2024.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2034.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2044.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2054.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2064.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2074.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2084.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2094.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2104.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2114.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110425_rotw_antivirus-is-logo.png" medium="image">
			<media:title type="html">20110425_rotw_antivirus-is-logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110425_rotw_antivirus-is.png?w=300" medium="image">
			<media:title type="html">20110425_rotw_antivirus-is</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
		<item>
		<title>Rogues of the Week: XP Total Security &amp; MS Removal Tool</title>
		<link>http://blog.webroot.com/2011/04/18/rogues-of-the-week-xp-total-security-and-ms-removal-tool/</link>
		<comments>http://blog.webroot.com/2011/04/18/rogues-of-the-week-xp-total-security-and-ms-removal-tool/#comments</comments>
		<pubDate>Mon, 18 Apr 2011 16:00:55 +0000</pubDate>
		<dc:creator>mguthrie09</dc:creator>
				<category><![CDATA[Blackhat SEO]]></category>
		<category><![CDATA[Destructive behavior]]></category>
		<category><![CDATA[Rogue Security Products]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Stupid malware tricks]]></category>
		<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[Trojans]]></category>
		<category><![CDATA[MS Removal Tool]]></category>
		<category><![CDATA[TRxBV]]></category>
		<category><![CDATA[TRxSH]]></category>
		<category><![CDATA[Vista Anti-Spyware]]></category>
		<category><![CDATA[Vista Anti-Spyware 2011]]></category>
		<category><![CDATA[Vista Anti-Virus]]></category>
		<category><![CDATA[Vista Anti-Virus 2011]]></category>
		<category><![CDATA[Vista Home Security]]></category>
		<category><![CDATA[Vista Home Security 2011]]></category>
		<category><![CDATA[Vista Internet Security]]></category>
		<category><![CDATA[Vista Internet Security 2011]]></category>
		<category><![CDATA[Vista Security]]></category>
		<category><![CDATA[Vista Security 2011]]></category>
		<category><![CDATA[Vista Total Security]]></category>
		<category><![CDATA[Vista Total Security 2011]]></category>
		<category><![CDATA[Win 7 Anti-Spyware]]></category>
		<category><![CDATA[Win 7 Anti-Spyware 2011]]></category>
		<category><![CDATA[Win 7 Anti-Virus]]></category>
		<category><![CDATA[Win 7 Anti-Virus 2011]]></category>
		<category><![CDATA[Win 7 Home Security]]></category>
		<category><![CDATA[Win 7 Home Security 2011]]></category>
		<category><![CDATA[Win 7 Internet Security]]></category>
		<category><![CDATA[Win 7 Internet Security 2011]]></category>
		<category><![CDATA[Win 7 Security]]></category>
		<category><![CDATA[Win 7 Security 2011]]></category>
		<category><![CDATA[Win 7 Total Security]]></category>
		<category><![CDATA[Win 7 Total Security 2011]]></category>
		<category><![CDATA[Windows Recovery]]></category>
		<category><![CDATA[Windows Repair]]></category>
		<category><![CDATA[Windows Restore]]></category>
		<category><![CDATA[XP Anti-Spyware]]></category>
		<category><![CDATA[XP Anti-Spyware 2011]]></category>
		<category><![CDATA[XP Anti-Virus]]></category>
		<category><![CDATA[XP Anti-Virus 2011]]></category>
		<category><![CDATA[XP Home Security]]></category>
		<category><![CDATA[XP Home Security 2011]]></category>
		<category><![CDATA[XP Internet Security]]></category>
		<category><![CDATA[XP Internet Security 2011]]></category>
		<category><![CDATA[XP Security]]></category>
		<category><![CDATA[XP Security 2011]]></category>
		<category><![CDATA[XP Total Security]]></category>
		<category><![CDATA[XP Total Security 2011]]></category>

		<guid isPermaLink="false">http://blog.webroot.com/?p=4239</guid>
		<description><![CDATA[By Andrew Brandt It&#8217;s been said that sunlight sanitizes almost everything it shines on. Beginning this week, and every week from now on, we&#8217;ll focus a concentrated beam on the rogue antivirus programs our support staff and Threat Research team have been working to remediate. Rogues have a tendency to switch up their names, user [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.webroot.com&amp;blog=6518987&amp;post=4239&amp;subd=webrootblog&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://blog.webroot.com/2011/04/18/rogues-of-the-week-xp-total-security-and-ms-removal-tool/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
	
		<media:content url="" medium="image">
			<media:title type="html">mguthrie09</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2001.png" medium="image" />

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2011.png" medium="image">
			<media:title type="html">Add to Facebook</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2021.png" medium="image">
			<media:title type="html">Add to Digg</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2031.png" medium="image">
			<media:title type="html">Add to Del.icio.us</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2041.png" medium="image">
			<media:title type="html">Add to Stumbleupon</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2051.png" medium="image">
			<media:title type="html">Add to Reddit</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2061.png" medium="image">
			<media:title type="html">Add to Blinklist</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2071.png" medium="image">
			<media:title type="html">Add to Twitter</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2081.png" medium="image">
			<media:title type="html">Add to Technorati</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2091.png" medium="image">
			<media:title type="html">Add to Yahoo Buzz</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2101.png" medium="image">
			<media:title type="html">Add to Newsvine</media:title>
		</media:content>

		<media:content url="http://getsocialserver.files.wordpress.com/2009/08/gs2111.png" medium="image" />

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_msremovaltool_logo.png" medium="image">
			<media:title type="html">20110417_rotw_msremovaltool_logo</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_msremovaltool_systray-popup2.png" medium="image">
			<media:title type="html">20110417_rotw_msremovaltool_systray-popup2</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_msremovaltool_window.png?w=300" medium="image">
			<media:title type="html">20110417_rotw_msremovaltool_window</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_msremovaltool_warning.png?w=300" medium="image">
			<media:title type="html">20110417_rotw_msremovaltool_warning</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_windowsrepair_window.png?w=300" medium="image">
			<media:title type="html">20110417_rotw_windowsrepair_window</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_windowsrepair_icon.png" medium="image">
			<media:title type="html">20110417_rotw_windowsrepair_icon</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_spam.png?w=300" medium="image">
			<media:title type="html">20110417_rotw_spam</media:title>
		</media:content>

		<media:content url="http://webrootblog.files.wordpress.com/2011/04/20110417_rotw_totalsecurity_window.png?w=300" medium="image">
			<media:title type="html">20110417_rotw_totalsecurity_window</media:title>
		</media:content>

		<media:content url="http://c.statcounter.com/4868061/0/92d716bc/1/" medium="image">
			<media:title type="html">Webroot blog stats</media:title>
		</media:content>
	</item>
	</channel>
</rss>
