Tuesday, January 31, 2012

Security Alert for your Desktop or Laptop

I was skeptical when I saw the pop-up from "Antivirus 2012" on my screen.  I knew that the dire warning of a system infection was fake, but when I cliked the X to close the window it expanded the fill my screen. (Has this happened to you?) Sure, any of us using our computers have seen this before. So, I am sure this sounds familiar.

To get rid of it I had to shut down my PC.  Dirty tricks like these, designed to get you to install and buy fake antivirus products, are more common than ever.  But while you might recognize such warnings as bogus, you might not know that the fake warning could be a red alert about an underlying bot malware infection.  Knowing the difference is key.  My computer crashed and burned due to this, and I do not want it to happen again.  We don't even blink at these pop-ups anymore, but we must be careful. The increased incidence of such pop-ups is due to more crooks going after easy money from shady programs claiming to make you rich using your internet.

Often, the inducement comes from a malicious Web site that employs JavaScript tricks to unleash a horde of pop-ups or even resize your browser window, to create something that looks like a real antivirus scan.  (This happened to me yesterday.) You might reach such a site by using a bad search link, like clicking online for a free movie or something that sounds reasonable. Then, you get redirected to a site that takes over your browser to display a fake antivirus scan, which is ( bogus); the site states critical infections are started, to push you to purchase the rogue antivirus app.to correct the problem.  If a site merely hijacks your browser, you don't have to worry too much: The pop-ups or fake scanner windows don't cause lasting damage.  However, you may be prevented from closing the window as you usually would.  But, you can bring up the Windows Task Manager with <Ctrl>-<Alt>-<Del> and close your browser that way.  sometimes just pressing <Alt>-<F4> will shut it down. Don't panic, as long as you don't install the program, no real harm occurs.

Unfortunately, the other way you might encounter a fake antivirus program could be found much worse. Criminals use bot-infected PCs, sometimes gathered into huge networks (called botnets) of a hundred thousand or more systems, to send spam world wide. (botnets are a glossary of malware and spam technology).  But, they also use bots to download rogue antivirus apps and other malware onto your PC. Anyone with an already-deployed botnet is potentially looking at this as way to make extra money." This is done by getting someone to download a supposed trial version of the rogue antivirus tool using a legitimate software sales technique or by installing the software behind-the-scenes with a bot.  Once installed, the rogue typically uses highly aggravating techniques, such as changing the windows desktop background to warn of a supposed infection and displaying content other warning, to push you to buy the full version of the software.  You might know not to download a rogue antivirus utility in response to a pop-up But when ordered to download it by a malicious controller, a hidden bot will never give you the chance to apply your good sense.

 However, if you follow your basic security precautions, such as keeping your antivirus software up-to-date and being careful with e-mail attachments and downloads, you can reduce the odds of getting infected with a bot or other malware.  If you do see pop-ups or other fake warnings from a rogue antivirus app on your machine, try to determine whether it is from a Web site or from actual software installed by a bot (or by someone else who uses the PC).  Where possibilities are endless  the fake software scam comes in many variations, and crooks' tactics differ, so there is no sure indicator that one is present. Watch for warnings that persist after you reboot your PC, especially if they appear before you open your browser or if you see an unfamiliar icon in your system tray.  If you right click on it, and it will not go away and your desktop background has changed, your are infected with a rogue antivirus program.

To sum it up, keep your antivirus software up-to-date, do not be fooled by pop-ups that will not let you close them out. There are many people all over the world that are sending these botnets, and it is only going to get worse. This my sound like a science fiction movie, and it is one that can be very costly.

Surf safely and I will be looking for the best free apps and services that you do not have to pay for!