My scareware night and how McAfee lost a customer

Posted by Larry Dignan for ZDNet

I had an ugly run-in with scareware last night, but I’m not sure what left me more annoyed: The dreaded Antivirus Pro 2009 scareware or McAfee, my anti-virus software provider.

First, my PC was overtaken by Antivirus Pro 2009, which is a rogue anti-spyware application. In a nutshell, Antivirus Pro starts automatically when you log on to your computer, creates fake malware and then holds the PC hostage. In addition it hi-jacks Internet Explorer and pelts you with porn sites (sprinkled in with a little Viagra for good measure). Simply put, Antivirus Pro 2009 tries to scare you into registering the software.

It’s not entirely clear how Antivirus Pro got into my Windows XP home PC. I was at work at the time, but the scareware wasn’t flagged by McAfee’s software and the signatures were up to date. Perhaps it was user error, but once Antivirus Pro is installed you’re screwed. Running task manager and add/remove was a disaster.[...]

After a few hours of trying a little of everything (including failed installations of Kaspersky’s anti-virus software and Malwarebytes Anti-Malware) I decided I needed some help. For some odd reason, I figured I’d pay McAfee support almost $90 to go into my PC and fix things. I figured I was running out of time (I was falling asleep at the keyboard) and I’d do anything—except pay the rat bastards behind Antivirus Pro 2009.

More on his experience in http://blogs.zdnet.com/BTL/?p=27234

Published Thu, Nov 12 2009 18:09 by donna

Comments

Thursday, November 12, 2009 1:24 PM by Bharath M N

# re: My scareware night and how McAfee lost a customer

Donna, I am not sure if i am reading this right!

Antivirus Pro 2009 rogue from the Braviax family was actively distributed in November 2008! But  Larry ran it to this in November 2009? Strange(Unless he had installed the rogue himself)

Friday, November 13, 2009 11:55 AM by donna

# re: My scareware night and how McAfee lost a customer

He said he's not sure how his PC got it.  Could be from video codecs?  Strange though that McAfee have failed to block it...since it's a year old threat.

Sunday, November 15, 2009 8:31 AM by Bharath M N

# re: My scareware night and how McAfee lost a customer

Am a bit too suspicious about the entire article itself!

Just a note I am not a fan of McAfee ;)

This family of rogue security application downloads additional components while installing on the machine.

They don't come as a single installer file, so even if you have a fake codec or the rogue installer one cannot install the rogue completely on the system without additional effort. (and also need to possess all the components as well)

I think the the total experience was fake (a Fake experience with a fake security application), The author picked up a wrong rogue on the day to blame McAfee. He should have picked any other rogue and the article would have blended perfectly with that rogue.

Friday, December 18, 2009 9:34 PM by Antony

# re: My scareware night and how McAfee lost a customer

I had the same problem as the author this December. Suddenly, Anti-Virus Pro 2009 appeared on my PC and held me hostage. I had, and still have, an uptodate licensed copy of McAffee running, which failed to detect and stop the virus. I have had McAffee for 7 years on several PCs and laptops, have been happy with it, but am now left wondering what happened to me here, and why McAfee didn't stop it, given the virus is so old. I called McAfee support and they could give no reasonable explanation. I declined the offer to let them check my PC, since I had disabled it by means os using a native Windows XP tool to locate the .exe file and rename it. That temporarily stopped the rogue from running, I then used anti-Malware bytes to clean up my PC.

Leave a Comment

(required) 
(required) 
(optional)
(required)