Knowing when it’s the Real McCoy

Written by Dan Blacharski on January 7, 2009

The most annoying pieces of malware are the fake security programs which pop up on your screen, informing you that they have detected malicious files on your computer. The program, which often disguises itself to look like it’s part of the Microsoft operating system, is very persistent. If I get one of these on my screen and try to press the “cancel” button, it won’t cancel. Usually the only way to cancel the popup is to click on the “X” button in the upper-right hand corner of the box, or go directly to the program manager with a “Control-Alt-Delete” and do it there. The little devils do everything they can to stay on the screen, even though I know very well they are not who they claim to be.

These fake security programs usually do very little if anything to protect your security, and are designed to either just take your money, steal your personal information, or implant malware or adware onto your computer. In some cases, devious bad guys infect computers with popups and adware, and in the same infection, will also implant the bogus security popup at the same time, to make it seem like it’s all the more needed. Don’t fall for it!

In a recent regular Microsoft patch, Microsoft pushed the Malicious Software Removal Tool (MSRT) to users. The MSRT tool is used to remove one of the most egregious of these fake security applications, called “Antivirus 2009″. According to some reports, the Microsoft tool deleted the bogus program from nearly 400,000 computers within the first nine days of the patch release. In addition to Antivirus 2009, Microsoft has also targeted similar bogus security porgrams, including Advanced Antivirus, Ultimate Antivirus 2008, and XPert Antivirus.

Unsolicited security popups that tell you you’re infected and then suggest an immediate download are always a bad idea. Don’t allow these downloads to occur. Do your research, compare products, and deploy security software from legitimate companies with an established reputation.

Subscribe to my RSS feed

Leave a Comment

Comment Policy