{"id":86,"date":"2011-09-15T20:25:22","date_gmt":"2011-09-15T17:25:22","guid":{"rendered":"http:\/\/www.hajifarah.com\/?p=86"},"modified":"2011-09-15T20:33:57","modified_gmt":"2011-09-15T17:33:57","slug":"fake-antivirus-scam","status":"publish","type":"post","link":"https:\/\/www.hajifarah.com\/blog\/?p=86","title":{"rendered":"Fake Antivirus Scam"},"content":{"rendered":"

How to avoid the nasty fake antivirus scam <\/strong><\/p>\n

By Herb Weisbaum<\/a>\u00c2\u00a0ConsumerMan<\/p>\n

Source: msnbc.com<\/p>\n

It\u00e2\u20ac\u2122s one thing to write about the dangers of malicious software. It\u00e2\u20ac\u2122s quite another to have it take over your computer. That\u00e2\u20ac\u2122s what happened to me a few weeks ago. I was at work doing a routine online search when all of a sudden my computer went nuts.<\/p>\n

A pop-up appeared in the center of the screen \u00e2\u20ac\u201d \u00e2\u20ac\u0153Warning: Virus Invasion Detection\u00e2\u20ac\u009d \u00e2\u20ac\u201d and a siren started wailing. \u00e2\u20ac\u0153Personal Shield Pro\u00e2\u20ac\u009d started to scan my hard drive. At least that\u00e2\u20ac\u2122s what it looked like.<\/p>\n

Within seconds, row after row of supposedly malicious software programs started stacking up in the window: viruses, spyware, adware and worms.<\/p>\n

Personal Shield Pro said it found 47 infections. The scan warned that because of the virus activity found, the following bad things were possible: a system crash, permanent data loss, system slowdown and Internet connection loss.<\/p>\n

I knew the scan was bogus, that my computer had been infected with fake antivirus software (FakeAV). But I couldn\u00e2\u20ac\u2122t close the program. In fact, I couldn\u00e2\u20ac\u2122t do anything. This rogue software had hijacked my computer. So, I turned it off and crossed my fingers.<\/p>\n

When I rebooted, the pop-up was still there. I was helpless and didn\u00e2\u20ac\u2122t know what to do. I contacted the IT department and one of the techs ran a number of scans. It took him two hours to find all the places this malware had embedded itself in the operating system on my hard drive.<\/p>\n

If this had been my home computer, it would have meant a costly trip to the repair shop to get my machine working again.<\/p>\n

\u00e2\u20ac\u0153Fake antivirus has probably been the most prominent online threat for the last two or three years. It has infected millions of people\u00e2\u20ac\u2122s computers,\u00e2\u20ac\u009d says Chester Wisniewski, a senior security advisor at Sophos, a worldwide security and data protection firm.<\/p>\n

FakeAV is also known as \u00e2\u20ac\u0153scareware\u00e2\u20ac\u009d because it\u00e2\u20ac\u2122s designed to scare you to into buying useless antivirus software that you don\u00e2\u20ac\u2122t really need.<\/p>\n

The scam follows a common pattern. A pop-up shows what appears to be a security scan that falsely detects dangerous or illegal files or programs. In some cases, the bogus warnings say there is porn on your computer. The malicious software may even display pornographic images on the screen. And those pop-up warnings won\u00e2\u20ac\u2122t stop until your click the button that says \u00e2\u20ac\u0153register now\u00e2\u20ac\u009d or \u00e2\u20ac\u0153remove all threats.\u00e2\u20ac\u009d<\/p>\n

Those who do that wind up on a site run by the cyberthieves. It says you need to buy their antivirus program \u00e2\u20ac\u201d which is fake \u00e2\u20ac\u201d to fix the security problems.<\/p>\n

\u00e2\u20ac\u0153So people pay for the program and they rescan their machine and of course it says their computer is clean,\u00e2\u20ac\u009d explains Coleen Robbins, chief of online threat initiatives at the Federal Trade Commission. \u00e2\u20ac\u0153But there was never anything wrong with the computer to begin with.\u00e2\u20ac\u009d<\/p>\n

Who is behind this? <\/strong>
\n<\/strong>Scareware is sold by international criminal gangs. Many are located overseas with accomplices in the United States. Based on recent prosecutions, we know the losses are staggering.<\/p>\n

In June, the U.S. Department of Justice announced it had busted a scareware gang<\/a> based in Latvia that badgered victims into spending as much as $129 to buy their fake antivirus software.<\/p>\n

The FBI and its international law enforcement partners found and seized computers and servers belonging to this gang in the Netherlands, Latvia, Germany, France, Lithuania, Sweden and the United States. The feds believe this one group scammed nearly a million people out of $72 million over a three-year period.<\/p>\n

(While this bust may slow down the FakeAV attacks for a while, they will not go away. There\u00e2\u20ac\u2122s simply too much money to be made.)<\/p>\n

These malicious FakeAV programs can do more than extort money. They can leave nasty things behind on your hard drive.<\/p>\n

\u00e2\u20ac\u0153There have been reports that people are left with Trojans, which are pieces of spyware that grab information from your computer, which make you vulnerable to identity theft,\u00e2\u20ac\u009d says Paula Selis, who runs the hi-tech unit in the Washington State Attorney General\u00e2\u20ac\u2122s office. \u00e2\u20ac\u0153That\u00e2\u20ac\u2122s even worse than being ripped off for a product that\u00e2\u20ac\u2122s absolutely worthless.\u00e2\u20ac\u009d<\/p>\n

How to deal with a scareware attack? <\/strong>
\n<\/strong>Most of this malware attacks Windows-based computers. If a virus alert appears on your screen, and it\u00e2\u20ac\u2122s not from a program you have installed in your computer, stop and think before you do anything. Most importantly don\u00e2\u20ac\u2122t touch it. Don\u00e2\u20ac\u2122t run a \u00e2\u20ac\u0153free\u00e2\u20ac\u009d scan and don\u00e2\u20ac\u2122t try to close the window. Shut your browser using Task Manager (control + alt + delete) or turn off the machine.<\/p>\n

If that doesn\u00e2\u20ac\u2122t work, go back to task manager and look at the list of the programs currently running. Delete the rogue one, the one that is unfamiliar from the list of running programs. Then run security scans with the software already on your machine to find where the FakeAV might have hidden.<\/p>\n

If that doesn\u00e2\u20ac\u2122t work, you need to see a professional. You might want to do that anyway.<\/p>\n

\u00e2\u20ac\u0153Any time you get something malicious on a computer and it is beyond your technological ability, you immediately need to get a professional to look at it,\u00e2\u20ac\u009d advises Adam Levin, chairman of Identity Theft 911. \u00e2\u20ac\u0153You may think you\u00e2\u20ac\u2122ve succeeded in removing it, but in truth it\u00e2\u20ac\u2122s masking itself and mutating through your system.\u00e2\u20ac\u009d<\/p>\n

How to protect yourself from scareware swindlers<\/strong>
\n<\/strong>The U.S. Department of Justice advises against buying computer security products that use unsolicited \u00e2\u20ac\u0153free computer scans\u00e2\u20ac\u009d to sell their products. It is also important to keep your operating system and security software up to date.<\/p>\n

Fake antivirus products are designed to appear legitimate. They have names that sound convincing, such as Virus Protector, Virus Shield, Malware Defense, AntiSpyWarePro and WinWeb Security, just to name a few. Only install software from trusted sources.<\/p>\n

It\u00e2\u20ac\u2122s also important that you become familiar with the way the legitimate anti-virus software on your computer looks and behaves. If you know what a real warning message looks like, it should be easier to spot a phony.<\/p>\n","protected":false},"excerpt":{"rendered":"

How to avoid the nasty fake antivirus scam By Herb Weisbaum\u00c2\u00a0ConsumerMan Source: msnbc.com It\u00e2\u20ac\u2122s one thing to write about the dangers of malicious software. It\u00e2\u20ac\u2122s quite another to have it take over your computer. That\u00e2\u20ac\u2122s what happened to me a few weeks ago. I was at work doing a routine online search when all of […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-86","post","type-post","status-publish","format-standard","hentry","category-technology"],"yoast_head":"\nFake Antivirus Scam - Haji-FARAH's POST<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hajifarah.com\/blog\/?p=86\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake Antivirus Scam - Haji-FARAH's POST\" \/>\n<meta property=\"og:description\" content=\"How to avoid the nasty fake antivirus scam By Herb Weisbaum\u00c2\u00a0ConsumerMan Source: msnbc.com It\u00e2\u20ac\u2122s one thing to write about the dangers of malicious software. It\u00e2\u20ac\u2122s quite another to have it take over your computer. That\u00e2\u20ac\u2122s what happened to me a few weeks ago. I was at work doing a routine online search when all of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hajifarah.com\/blog\/?p=86\" \/>\n<meta property=\"og:site_name\" content=\"Haji-FARAH's POST\" \/>\n<meta property=\"article:published_time\" content=\"2011-09-15T17:25:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2011-09-15T17:33:57+00:00\" \/>\n<meta name=\"author\" content=\"Hajifarah\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hajifarah\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hajifarah.com\/blog\/?p=86\",\"url\":\"https:\/\/www.hajifarah.com\/blog\/?p=86\",\"name\":\"Fake Antivirus Scam - Haji-FARAH's POST\",\"isPartOf\":{\"@id\":\"https:\/\/www.hajifarah.com\/blog\/#website\"},\"datePublished\":\"2011-09-15T17:25:22+00:00\",\"dateModified\":\"2011-09-15T17:33:57+00:00\",\"author\":{\"@id\":\"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/e2d3fe3bf3bff3127013a1bf1ffc8aaa\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.hajifarah.com\/blog\/?p=86#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hajifarah.com\/blog\/?p=86\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hajifarah.com\/blog\/?p=86#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hajifarah.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fake Antivirus Scam\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hajifarah.com\/blog\/#website\",\"url\":\"https:\/\/www.hajifarah.com\/blog\/\",\"name\":\"Haji-FARAH's POST\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hajifarah.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/e2d3fe3bf3bff3127013a1bf1ffc8aaa\",\"name\":\"Hajifarah\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8a4cf235281f368994a4a72396af1da22cd84c9c9ea96eaffda49413477a0106?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8a4cf235281f368994a4a72396af1da22cd84c9c9ea96eaffda49413477a0106?s=96&d=mm&r=g\",\"caption\":\"Hajifarah\"},\"url\":\"https:\/\/www.hajifarah.com\/blog\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fake Antivirus Scam - Haji-FARAH's POST","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hajifarah.com\/blog\/?p=86","og_locale":"en_US","og_type":"article","og_title":"Fake Antivirus Scam - Haji-FARAH's POST","og_description":"How to avoid the nasty fake antivirus scam By Herb Weisbaum\u00c2\u00a0ConsumerMan Source: msnbc.com It\u00e2\u20ac\u2122s one thing to write about the dangers of malicious software. It\u00e2\u20ac\u2122s quite another to have it take over your computer. That\u00e2\u20ac\u2122s what happened to me a few weeks ago. I was at work doing a routine online search when all of […]","og_url":"https:\/\/www.hajifarah.com\/blog\/?p=86","og_site_name":"Haji-FARAH's POST","article_published_time":"2011-09-15T17:25:22+00:00","article_modified_time":"2011-09-15T17:33:57+00:00","author":"Hajifarah","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Hajifarah","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.hajifarah.com\/blog\/?p=86","url":"https:\/\/www.hajifarah.com\/blog\/?p=86","name":"Fake Antivirus Scam - Haji-FARAH's POST","isPartOf":{"@id":"https:\/\/www.hajifarah.com\/blog\/#website"},"datePublished":"2011-09-15T17:25:22+00:00","dateModified":"2011-09-15T17:33:57+00:00","author":{"@id":"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/e2d3fe3bf3bff3127013a1bf1ffc8aaa"},"breadcrumb":{"@id":"https:\/\/www.hajifarah.com\/blog\/?p=86#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hajifarah.com\/blog\/?p=86"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hajifarah.com\/blog\/?p=86#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hajifarah.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Fake Antivirus Scam"}]},{"@type":"WebSite","@id":"https:\/\/www.hajifarah.com\/blog\/#website","url":"https:\/\/www.hajifarah.com\/blog\/","name":"Haji-FARAH's POST","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hajifarah.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/e2d3fe3bf3bff3127013a1bf1ffc8aaa","name":"Hajifarah","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hajifarah.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8a4cf235281f368994a4a72396af1da22cd84c9c9ea96eaffda49413477a0106?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8a4cf235281f368994a4a72396af1da22cd84c9c9ea96eaffda49413477a0106?s=96&d=mm&r=g","caption":"Hajifarah"},"url":"https:\/\/www.hajifarah.com\/blog\/?author=2"}]}},"views":6136,"_links":{"self":[{"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/86","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86"}],"version-history":[{"count":0,"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hajifarah.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}