What Has to Be Known About BlockProtector and Its Website?

Let's continue our research of BlockProtector - one of the most recent rogues from the well-known rogueware family WiniSoft (aka WiniGuard). Yesterday I warned everybody that this fake program aims to trick you into purchasing a full version of, actually, a completely useless software application. Today the time has come for the analysis of the BlockProtector's website. What has to be known about the site and the rogueware itself?

I've already warned you that BlockProtector usually enters into computer with the help of other Trojans. They can drop and install it onto the victim's computer system. The program can also be downloaded from the website b l o c k p r o t e c t o r . c o m. (You can find a screenshot of this website bellow). The website looks rather attractive and eye-catching; however, don't get tricked by these attractive features and don't download this program.

BlockProtector seems to have originated from London (Great Britain). According to information about the website provided by whois.com, the registrant is Eric Charles Dahlgren, located at 30 Leicester Square, London, WC2H7. However, according to the IP address of the site - 212.175.87.195 - the real birthplace of the rogueware is Ankara, Turkey. 

It's interesting to note that the developers of WiniSoft rogues had finally changed their IP address from 83.233.30.66 (Sweden) to the above mentioned 212.175.87.195 (Ankara, Turkey). They had used 83.233.30.66 for their previous creations, including TrustFighter, SaveArmor, SoftSafeness, SoftSoldier and many others. The IP address 212.175.87.195 has been used since the appearance of BlockWatcher.

Upon installation, BlockProtector creates fake files that are later detected as infections. Once on the system, it will perform a scan of your computer system and immediately start displaying fake warning messages that your system is infected with hundreds of parasites. Below you can see a screenshot of this fake computer scan:

After the scan, all you have to do is buy the full version of BlockProtector in order to remove the huge number of purportedly found malware. However, don't get trapped because this rogue anti-spyware application won't resolve any security problems on your PC. If you have become a victim of this attack and are now fighting BlockProtector, click here for a complete list of instructions on how to remove it manually.