Again, the Rouge Antivirus Vendors are on rise. This is not just happening this year, actually this is noticed during the begining of year. Check my last year's blog posting "Beaware of Security Essentials 2010, A Rouge Anti-Virus" for the similar Rouge antivirus product.
This time they, "Rouge Antivirus Vendors", came up with "AVG -Antivirus 2011", which is obviously fake. Rouge Antivirus Vendors are impersonating the legitimate AVG antivirus product and replicating the GUI and trademark symbols of AVG antivirus.
Just have a look to the Rouge antivirus "AVG -Antivirus 2011" shortcut icon:
Once installed on system, It blocks other programs running on the computer, hijacks web browsers and displays fake security alerts, threats and risk. This kind of fake security warning may be observed.
It also reports false infections found on your computer and ask to purchase a full version to remove them.
This is the warning page displayed by Rouge AVG-Antivirus 2011, which says, this is trial version having limited functionality and in-order to disinfect your system, you need to purchase the full version of Rouge AVG-Antivirus 2011. And they will lead you to the make some financial transactions.
Please do care about this threat, do not panic and pay. For removal please follow the steps mentioned below:
- Disable System Restore Temporarily
- Update the latest virus definitions for your existing Antivirus
- Reboot computer in Safe Mode
- Run a full system scan and clean/delete all infected file(s)
Countermeasures:
- Use caution while clicking on links to Web pages
- Keep up-to-date Antivirus and Antispyware signatures
- Be cautious while opening e-mail attachments
- Keep up-to-date patches and fixes on the operating system and application software
A List of rouge anti-virus /anti-spyware products can be found here.
nj0y !!!
courtesy: SAGI (Researcher)
#@V3 $@F3 8R0W$!n9 . . .
To read more, please follow:
http://bh00ps.blogspot.com/2010/05/beware-of-security-essentials-2010.htmlhttp://en.wikipedia.org/wiki/Rogue_security_software
http://www.cert-in.org.in/s2cMainServlet?pageid=PUBVA01&VACODE=CIVA-2010-0826
http://www.cert-in.org.in/s2cMainServlet?pageid=PUBVA01&VACODE=CIVA-2010-0863
http://www.cert-in.org.in/s2cMainServlet?pageid=PUBVA01&VACODE=CIVA-2010-0860
