New spyware system mimics Windows Security Center

Fri Oct 17, 2008 5:22PM EDT

See Comments (288)

What's wrong with the screenshot to the right? Ignoring those red boxes added for emphasis, it looks identical to the Windows Security Center... only it's not. In fact it's a spyware hoax designed to mimic the Security Center almost identically, not to mention trick you into purchasing WinDefender 2008 software, a phony security app which will clear up only the phony security alerts its malware component creates.

WinDefender is just the latest in a series of malware attacks designed to look like legitimate Windows components. But people have finally started to wise up to those smallish "alert" pop-ups, so malware creators are upping the ante with full-blown knockoffs of real security apps. Computer Associates has the details.

In addition to the fake Security Center, WinDefender nags you further by blocking web pages from opening (blaming the blockage on "adware/spyware on your PC"). It adds a yellow drop-down box to Internet Explorer like you get when you try to download something from the web, again with text urging you to install WinDefender 2008 in order to unblock the sites. Just $40 of extortion money makes it all go away...

Most anti-malware software ought to be able to scrub WinDefender 2008 off your machine, but the more important lesson is that you pay close attention to the interface of anything security-related on your PC to ensure that you aren't being scammed while you're actually trying to address any security problems. Anything you see in Windows that recommends a specific program to solve any sort of problem should immediately be considered suspect.

Comments on New spyware system mimics Windows Security Center

Post a Comment

Join in the discussion. Here you'll see the comments in the order they were posted.

  • 1 Posted by hookemhorns5468 on Thu Sep 3, 2009 4:20PM EDT Report Abuse

    antivirus 2008 does the exact same thing. it looks very similar to this. it nearly ruined my computer. ):

  • 2 Posted by alexgannis on Thu Sep 3, 2009 2:50PM EDT Report Abuse

    If you have a anti spyware it should block this from happening.

  • 3 Posted by toyotabedzrock on Thu Sep 3, 2009 10:18PM EDT Report Abuse

    This is old news, i have been cleaning this exact program, in one form or another, off of my customers computers for over a year now. Perhaps an article on why people have become so gullible as to infect themselves more than once with the same program.

  • 4 Posted by paul_soares on Thu Sep 3, 2009 8:03PM EDT Report Abuse

    Most anti-virus programs do not block these unless you have one that uses Host Intrusion Prevention technology. I use Malwarebytes Anti-Malware to remove these trojans/fake antimalware programs.

  • 5 Posted by agustin2489 on Thu Sep 3, 2009 2:47PM EDT Report Abuse

    Wow, I didn't think spyware would get this tricky. I suppose having Spybot S&D would help

More Posts: First Prev 1 2 3 4 5 Next Last

Post a Comment


My Tech

Please enable your browser's cookies to activate the My Tech column.

Also on Yahoo! Tech

Computers Home Office Wi-Fi & Networking Phones & PDAs Cameras & Camcorders TV & Home Theater Portable Audio
 

Question and Answer content at Yahoo! Tech is written by Yahoo! users at Yahoo! Answers. Yahoo! does not evaluate or guarantee the accuracy of any Yahoo! Answers content. For more information, read the Full Disclaimer.

Opinions expressed by the Advisors are their own and do not necessarily reflect the views of Yahoo! Inc. Yahoo! receives no compensation from any manufacturer or distributor nor does it compensate any Advisor for the coverage of any product or service in any Advisor's content.