Spyware.CyberLog-X

Steve S. writes in that he was infected with a new scamware program during a recent trip to China. The program inserts a new icon in the taskbar (yellow warning triangle with black exclamation mark). A system alert balloon will appear with one of the following four messages (notice misspelling of word "baloon" in each message):

"Security Alert: Networm-i.Virus@fp
Type: Virus/Network worm
Damage Level: High
Description: Virus that infects executable files.
Recommendation: Delete/quarantine immediately.
Protection: Click this baloon to download certified Antivirus software."

-or-

"Critical System Warning!" in a Win-XP type window which states:
"Your system is probably infected with latest version of Spyware.CyberLog-X.
Type: Spyware
Infection Length: 266,129 bytes
Risk: High
Systems affected: Win 95,98,200,NT, 2003 Server, XP
Behaviour: Spyware.CyberLog-X is a spyware program that monitors user activity, logs keystrokes and tracks websites visited.
Symptoms: Low Internet connection speed, Low system performance, Security center alerts, Strange pop-up windows

-or-

"Critical System Error!
System detected virus activities. They may cause critical
system failure. Please, use antimalware software to clean and
protect your system from parasite programs.
Click this baloon to get all available software."

-or-

"System Alert: Trojan-Spy.Win32@mx
Type: Spyware/Trojan
Vulnerable: Windows 95/98/ME/NT/2003/Windows XP
Description: Spyware program that sends condidential information to a remote attacker
Protection: Click this baloon to download official security software."

Image:

The program then suggests that the user purchase one of the following anti-spyware programs:

1. WinAntiSpyware
2. AntiVirusGolden
3. SpyHeal
4. VirusBlast

Do NOT purchase any of these programs as they are bogus. It is recommended that you download a reputable spyware detector to eliminate this threat.

Also known as: Spyware.CyberLog-X, Trojan-Spy.win32@mx, VirusBurst
Source Country: China