Fraud Alert – Beware of this Antivirus Scam
by Frank Jovine on 07/18/2009 in Fake Antivirus, Security
VirusBye is a misleading application that gives exaggerated reports of threats on the computer. The user is then prompted to pay for a full license of the application in order to remove false or exaggerated threats. VirusBye is a scam just like many of the fake antivirus programs that have launched since January 2009.
Type: Misleading Application
Name: VirusBye
Publisher: Unknown at this time
Risk Impact: Medium
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP
Behavior: This security risk can be downloaded from a Web page and must be manually installed.
Removal Instructions
The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.
- Disable System Restore (Windows Me/XP).
- Update the virus definitions.
- Run a full system scan.
- Delete any values added to the registry.
For specific details on each of these steps, read the following instructions.






Jonathan - Advanced Life Skills
Jul 18th, 2009
Seems like these scams are multiplying like rabbits lately. I figure if it’s not from my installed antivirus software, then it’s a scam.
Frank J
Jul 18th, 2009
Jonathan,
It is not getting any better. There are so many scams on the internet it’s scary, but I am here to hopefully provide the latest.
How to remove | Beware of this Antivirus Scam | How To Remove
Jul 18th, 2009
[...] post: Beware of this Antivirus Scam Tags: affected, application, launched-since, medium-systems, misleading, publisher, remove-false, [...]
g7w
Jul 18th, 2009
Nice article Frank and yes this is a Trojan.
Some Publisher info:
Domain Name : virusbye.net
Registrar : Dotname Korea Corp.
Frank J
Jul 19th, 2009
g7w,
Thanks for the link to the publishers site. I will head over and give it the big red!
PC Security
Jul 28th, 2009
I think, VirusBye by itself is not a Trjan. It takes the help of Trjans present in the victim’s computer to sneak in and then advertise itself to convince the user to purchase its full licensed version.
It basically can be categorized as a rogue security software.
(Silki)
g7w
Jul 29th, 2009
If you go to the website, and if you click on the Download link, as long as you have a decent Antivirus Program running (I use Avira AntiVir) it will detect this, before the download has a chance to complete:
Virus or unwanted program ‘DR/Dldr.Agent.cfjg [dropper]‘
detected
Alternatively, you can review the VirusTotal analysis here:
http://www.virustotal.com/analisis/1c29d15a9bb6c930040775cad1a695399ecc06bff39724494e38d8bbe05acbf4-1248598454
Frank J
Jul 29th, 2009
g7w,
Thank you for the info as always. Your help is greatly appreciated!
A. Zuck
Jul 19th, 2009
I have seen so many of these scams and while I have never fallen victim to one my Mom has and given that I’m the one who fixes her computer issues that’s almost as bad. I only wish some of the less tech savy friends and family would read and learn. It would save me alot of grief.