Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

New Series of Anti-Virus Rouge attacks

A new series of rouge programs have been created from the Anti-Virus 2008 series. If you encounter a pop-up message while visiting a website that differs from your current AV protection, use ALT+CRTL+ESC to invoke Task Manager and exit safely from the pop-up Window.

More "Fake AV" Incarnations Making The Rounds
http://isc.sans.org/diary.html?storyid=5584

QUOTE: Using obfuscated javascript techniques, more "Fake Anti Virus" malware is continuing to present itself to unsuspecting Internet users - in the hopes of gaining an installation through the use of rather effective, social engineering methods.

In terms of propagation, getting a "hit" from this malware is as easy as entering a series of search terms on your favorite search engine, and unluckily picking a search result that delivers nothing more than the misleading introductory screen and fake anti-virus pop-up alerts (with their associated "D-level" english grammar).  Should you unfortunately find yourself victim to this, remember to not click anywhere on the screen, but instead use "Task Manager - Applications" to terminate the victimized web browser session.

Comments

threats said:

"use ALT+CRTL+ESC to invoke Task Manager and exit safely from the pop-up Window." Is it ALT+CRTL+ESC or ALT+CRTL+DEL? anyway, thanks for this info.

# December 31, 2008 8:18 PM

threats said:

"use ALT+CRTL+ESC to invoke Task Manager and exit safely from the pop-up Window." Is it ALT+CRTL+ESC or ALT+CRTL+DEL? anyway, thanks for this info.

# December 31, 2008 8:22 PM