September 1st, 2006

VirusRescue Becomes VirusBurst?


By Chris Boyd
Contributing Writer, RealTechNews

Not so long ago, I covered a “rogue security application” called VirusRescue - rogue, because it relied on misleading advertising to convince you to buy it and (more often than not) appeared on a system via a hijack. Well, after the product received a thorough beating from numerous sites, it looks like VirusRescue has died a death, only to be quickly replaced by…VirusBurst!

This latest incarnation currently uses the C:\Windows\System32\eowygj.dll file to infect you. Once loaded it will download VirusBurst and install the software without permission while displaying fake security alerts….One of the things I find most amusing about these programs are that they detect the file that is used to download and install it as a Trojan. Source: Bleeping Computer Blog

We Say: What I particularly love about these programs is that their creators always claim they have no relation to Spywarequake, SpyAxe, SpyFalcon and all the other wonderful variants floating around the Web. However, as you can see here, I point out that they kind of goofed when they created the EULA for this program. Though you can plainly see the words “VirusBurst” on the EULA box, the text inside the box mentions Spywarequake repeatedly.

Whoops, anyone?

As a final thought, think of the mayhem caused for people writing about this stuff by all the name changing antics (woe is me!) In this one writeup alone, I accidentally called it VirusBlip, VirusBlow, VirusBlast and about a dozen other names before I gave it a final checking over.

Coming soon to a PC near you - Super Monkey Virus Blasting Blowout…

Share and Enjoy:These icons link to social bookmarking sites where readers can share and discover new web pages.
  • del.icio.us
  • digg
  • Fark
  • NewsVine
  • Reddit
  • YahooMyWeb
You can leave a comment, or trackback from your own site. RSS 2.0

9 comments to "VirusRescue Becomes VirusBurst?"

  1. grnil says:

    Everytime a new rogue antivirus show up, creators make money. People, make a research on google about product before you it!

    VirusBurst removal

    September 3rd, 2006 at 9:44 am

  2. Tony says:

    It’s all very well writing about it - how the hell do I get rid of it? (Virusburst)

    September 4th, 2006 at 3:36 am

  3. MK says:

    How do I get rid of Virusburst. Even if I use Smitrem.exe, how do I ensure that it would not cause a further damage as its publisher is also not certified.

    Please help.

    September 4th, 2006 at 6:54 pm

  4. Lockergnome's Tech News Watch says:

    VirusRescue Becomes VirusBurst?

    Chris Boyd of RealTechNews writes: Not so long ago, I covered a “rogue security application” called VirusRescue - rogue, because it relied on misleading advertising to convince you to buy it and (more often than not) appeared on a system via a hijack…

    September 5th, 2006 at 6:10 pm

  5. Wes says:

    eowgj.dll does not seem to be the active file for the current version. I have run four removal programs and finally deleted the Media-codec and Virusburst files they found. However, how do I get the icon and it’s blinking warning off my taskbar?

    September 6th, 2006 at 6:00 pm

  6. Wes says:

    I went on www.bleepingcomputer.com and found a program called roguescanfix. It removed the icon from the taskbar and from my PC.

    September 6th, 2006 at 6:47 pm

  7. Chris Gage says:

    This is not a flame, but a warning…

    Be _V_E_R_Y_ careful before downloading any so-called fixes to anything like VirusBurst, or anything that purports to “remove” it. The “fix” may also contain malware itself, or instead of manipulating you into fattening the bank balance of this Austrian woman (Judi Stewart) and her buddies, the “fix” may manipulate you into purchasing something else equally bogus that does the same for some other selfish drone with a Windows Internals manual and an over-exaggerated sense of self-importance.

    I would hereby like to ask all those who offer these fixes to provide some collateral as to the honesty of their intentions. Forgive me for being anal about this, but ideally I’d like to see it posted on some incontrovertibly reputable web site, and not just on some apparently well-meaning blog. By the same token, I would _N_O_T_ expect this site to offer any kind of warranty, just to say, yes, it worked FOR US.

    September 10th, 2006 at 3:11 pm

  8. Bart says:

    Spyware Quake seem to be the grandfather to VirusBurst. It seems Virusburst has a son VirusBursters. Now, I think there is a new generation… Pestcapture. Watch out for this one.

    http://remove-virusburst.org

    http://remove-PestCapture.org

    December 7th, 2006 at 8:59 pm

  9. fadikjan says:

    Thinking about a church wedding? Congratulations, we wish you well as you begin
    your journey into married life. In this section you will find a number of …

    October 17th, 2008 at 9:20 am

Leave a comment