Malware Alert!

6 Oct 2010 by BradB, No Comments »

There is new Malware making the rounds. We would like to help you identify this threat because it uses Microsoft’s name and appears legitimate, but don’t be fooled – Microsoft will never ask you for money or your credit card information for any reason!

Always know which legitimate antivirus software you have. This will help you weed out the impostors. If you think you may have this infection please close all browser windows and run the appropriate security software as instructed by your technician or call us to setup an appointment ASAP. Regardless of how you handle this threat DO NOT provide any random pop-up with credit card information! If you are unsure about what to do, always feel free to call us for advice.

Below is some excerpts from www.bleepingcomputer.com about this threat, along with a screen shot of the initial pop-up:


Click enlarge

“The fake Microsoft Security Essentials Alert is a Trojan that attempts to trick you into thinking you are infected so that you will then install and purchase one of 5 rogue anti-virus programs that it is distributing. When the Trojan is run it will masquerade as an alert from the legitimate Windows Microsoft Security Essentials Program anti-virus program. This alert will be titled Microsoft Security Essentials Alert and states that a Trojan was detected on your computer. It will list this Trojan as Unknown Win32/Trojan and state that it is a severe infection. It will then prompt you to clean your computer using the program in order to remove it. When you click on the Clean Computer or Apply actions button, it will state that it was unable to remove it and then prompt you to scan online. If you click on the Scan Online button it will list 35 different anti-virus programs, 30 of which are legitimate anti-virus programs and 5 that are rogues that the Trojan is distributing. These five rogue programs are:

* Red Cross Antivirus
* Peak Protection 2010
* Pest Detector 4.1
* Major Defense Kit
* AntiSpySafeguard or AntiSpy Safeguard

During this fake online scan only the 5 fake anti-virus programs listed above will state that this supposed Trojan is an infection. It does this to scare you into clicking the Free Install button next to them that will install the rogue program onto your computer and then reboot your computer. It should be noted that Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit, AntiSpySafeguard, and AntiSpy Safeguard that this Trojan is distributing are exactly the same. They just have different names and different graphical user interfaces.

After your computer is rebooted, the rogue that was selected will automatically start and perform a fake scan on your computer. When it has finished it will state that it was able to clean numerous files, but was not able to clean some files, such as iexplore.exe, until the program is purchased. While running, this program will also terminate many programs when you attempt to run them and display a message stating that they are infected. This message is:

The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.

Furthermore, these rogues will also display security alerts from your Windows taskbar that display messages such as:

Warning! Database updated failed!
Database update failed!
Outdated viruses database are not effective can’t guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!

Warning! Running trial version!
The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!

All of these security alerts, like the scan results, are fake and should be ignored.

As you can see, this Trojan was created to trick you into thinking that you are infected so that you will then download and install one of its rogue anti-virus programs. If you have been tricked by this Trojan and installed Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit, AntiSpySafeguard, or AntiSpy Safeguard then do not purchase it for any reason. If you have already purchased one of these programs, then I strongly suggest you contact your credit card company dispute the charges stating that it is a scam and a computer virus.”

Tags: , , ,

Leave a Reply

*

Florida tax-free weekend

Just a note if you are in the market for a new computer, Florida’s tax-free weekend is happening today through Sunday, [&hellip

Summer is here!

It’s time to check your equipment to make sure your computer is protected from these summer storms and power outages. [&hellip

Follow Us!

Follow Us! Follow Us! Follow Us!

Pages

Helpful Links

Categories