JusticeDept.com

September 9, 2009

ANTIVIRUS PRO 2009 Is Malware

I was just attacked by a virus (ANTIVIRUS PRO 2009), it masked itself as a antiviral program. I did not download it. It downloaded itself. I may have exposed myself with a few websites I viewed. I’m thinking that’s how i got it. I’ts some sort… of rouge. I didn’t wanna try and delete it manually, for fear of damage. So, I ran my Norton and Spyware Doctor, and it identified it and claims its removed now. Do you think its really gone? i just hope it didn’t burrow in there. Anyway, let me know if you can help.

ANSWER
It sounds like you are good to go. Watch for strange activity as described here:

Antivirus Pro 2009 configures itself to start automatically when you start your computer. It will also create a variety of fake malware files that are harmless. The Antivirus Pro installs these so they are “detected”. When AntivirusPro scans your computer, it will list a variety of infections that cannot be removed unless you buy the program. Most of the infections are the fake files, as well as, legitimate Windows files that are being called infections. The idea is to scare you into buying their product.

While bwosing the web, you may find that your Internet Explorer has become hijacked. Antivirus Pro will randomly display a screen stating that there has been insecure internet activity and there is a threat of a virus attack. You then are prompted to either get protection or continue to the site. Regardless of the option you select, you will instead directed to a webpage that tries to sell you their program. Yet, another scare tactic that should be ignored.

March 8, 2009

Economic Stimulus Email and Website Scams

Filed under: Uncategorized — Tags: , , — @ 5:03 pm

US-CERT is aware of reports of economic stimulus scams circulating. These scams are being conducted through both email and malicious websites.

Some of the email scam messages request personal information, which can then be used for identity theft. Other email scam messages offer to deposit the stimulus funds directly into users’ bank accounts. If users provide their banking information, the attackers may be able to withdraw funds from the users’ accounts.

The website scams entice users by claiming that they can help them get money from the stimulus fund. These websites typically request payment for their services. If users provide their credit card information, the attackers running the malicious sites may make unauthorized charges to the card, or charge users more than the agreed upon terms.

US-CERT encourages users to do the following to help mitigate the risks:

Review the Federal Trade Commission alert about economic stimulus scams.
Refer to the Recognizing and Avoiding Email Scams (pdf) document for more information on avoiding email scams.
Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.

Powered by WordPress