Virus Threats

[johnman]

In my job as a computer repair person (the full title is computer engineer but I sound like a prick when I use that) I regulary see fake anti-virus programs and other spyware apps on customers computers. Recently they have become even more diverse so I thought I would do the good thing and share the major threats I know about with you all. If you could also add any you know of then that would be great.

Anti-virus 2009: Looks like a windows program due to the icons its uses and downloads itslef onto your computer wther you click yes or no. It then scans for viruses and turns up hundeds of fake results, then pesters for money to get rid of them, but wont even if you pay. Can be very difficult to remove, but once a single scan with Spybot-search and Destroy removed for me.

Firefox 2009: Looks just like the regular firefox page, and it almost caught me out at work. Just in time I remembered that Firefox is a .org page. Similar effects to Anti-virus 2009

Golden Anti-spy Ware: I have only seen one case of this, and at first I thought it was a genuine but uncommon free virus scanner. Its basically spyware and can be removed via Malwarebytes and Spybot Sd.

MalwareBytes 2009: This is a fake version of the aforementioned malwarebytes, once again an offshoot of anti-virus 2009

Simley Central: Spyware, and just the kind of thing your kid will click on,"Free smileys! Click to download!" It wont pester you for money and does no noticeable harm, but any spyware is bad spyware.

My web Search: Spyware again, it installs its self as a tool bar was moniters the websites you vist. Once again, no noticeable damage, but do you really want a program monitaring you banks website?

I wont include worms or trojans, as there are so many of those, and they wont ask you if you want to downlaod them or not.
mos tof these problems can be sloved by using Malwarebytes or Spy-bot sreach and destory, both free programs that we use at work, and they seem to do a very good jobof cleaning up.

 

[New Troll]

Anything that randomly asks you to download it is generally bad.

And all these fake anti-viruses is why I only use purchased programs like Norton or McAfee. The only freeware program I would recommend using is SpyBot: Search & Destroy (make sure it's the real SpyBot though and not malware!) but unfortunately niether Norton nor McAfee allow you to run it while the're active anymore.

And here's a little helpful hint to everyone. Anytime a window pops up asking you if you want to download thier program, don't click any buttons on the window. Close the window using the taskbar. Better to be safe than to be stupid.

Also, thank you johnman for bringing these newer cons to our attention.

 

[captainwillies]

thanks man good list

 

[johnman]

A generally good hint is that if it has 2009 in the title, stay away.

 

[QuadrAlien]

I remember being asked to help out with a friend's computer with a spyware and virus problem. While working, it was explained to me that some of his friends had seen a minor spyware link that had appeared on his desktop at some point (the usual manner linking to illegal software, porn, gambling or the like - can't remember which sort they decided upon), which would have been easy enough to remove with a quick check-up.

They had then decided to follow said link for a laugh.

Naturally, my only reaction on hearing said story was a quiet "You did what?"

This explained why when I had arrived, said links were everywhere, the toolbar was giving me badly-spelled error messages on a regular basis, the spyware scanning programs I used were generally giving up half-way through, and a virus scan was giving back results only rivalled by Strongbad's 486 in the 'Virus' e-mail. It was fortunate that the owner of the computer had recently removed all important documents from the machine (as it was one borrowed from university), so I could recommend a complete reformat, and possibly an exorcism to be on the safe side.

 

[johnman]

Ah simple fools :0

 

[bodyklok]

Anti-virus 2009: Looks like a windows program due to the icons its uses and downloads itslef onto your computer wther you click yes or no. It then scans for viruses and turns up hundeds of fake results, then pesters for money to get rid of them, but wont even if you pay. Can be very difficult to remove, but once a single scan with Spybot-search and Destroy removed for me.

I encountered this one before on my old computer. I'm sorry to say I did download it, like the fool I am, but afterwards I realised it was probably a scam not that I did anything becuase I was getting a new computer in a few days so I just ignored it.

 

[Lyri]

I remember a particularly annoying program, it's supposed to be a p2p client i think however it fills your HD with nothing but virus's,spyware and other fun stuff.
Then when you try to remove it, you can't it simply takes you too an uninstall page but to do that you have to install something else.

If I remember it I'll inform you.

 

[furnatic]

I use Symantec Endpoint. It uses definitions from all the sights you listed. Quite powerful. Not one infection yet in all the crap I've gotten a hold of. Not to mention, before I got Endpoint, I traced the IPs of all computers accessing my computer, and had a self-made program that alerted me when an attempt to place a file in my computer was in progress. In that case, I'd simply do a 'back-hack' and send one of my own little friends' their way if it was a malicious code they were sending me.

 

[mikecoulter]

Basically, if you don't want any trouble run Eset Smart Security and Spybot Search And Destroy. Never, ever had any problems.

 

[Zombie_Fish]

That is a good list of the most common causes of it. I've had something similar to Anti-virus 2009 on my computer before and it was a pain to get off. McAffee couldn't find the source, nor could Norton and we have to get a computer engineer as a result. That's one of the most annoying ones. I also know my web search but didn't know it was spyware.

Oh and I also know Smiley Central but have never downloaded it, but there are tonnes of variations of that like Cursor mania etc. they're all bad.

Only thing I can add is beware of pr0n sites, but that's fairly obvious. As my mate once said:

They literally just f*ck everything.

 

[johnman]

They literally just f*ck everything.

Pure genius
AV programs dont detect things like Anti-virus 2009, as they are not actaully viruses, they are spyware, which is why programs like spyware SD are mcuh more effective.

 

[johnman]

Oh and I just remembered another 2 threats:

Avg 2009: same as other 2009 products

Personal Pc Clean Up (somthing along those lines): Runs just before you reach explorer and performs a virus scan turning up fake results and downloading more in the process, since it runs before your Av programs have booted.

 

[megapenguinx]

Thanks Johnman, I'll keep a look out for the firefox 2009 one.

 

[Zosephine]

Wow, I didn't know Firefox was .org! Thanks for making me slightly less of a nooblet.

I'm actually getting a laptop soon, and viruses are a big concern for me. Thank you for the info. =)

On another note, some older Dell desktops that I have come across have started asking me to get this "WGA Notification Program" or something. Claims to be Microsoft, but I'm wary. Any thoughts on that? I can get more specific if you want.

 

[Stevedave00]

Those are so annoying to get rid of too.

 

[johnman]

Wow, I didn't know Firefox was .org! Thanks for making me slightly less of a nooblet.

I'm actually getting a laptop soon, and viruses are a big concern for me. Thank you for the info. =)

On another note, some older Dell desktops that I have come across have started asking me to get this "WGA Notification Program" or something. Claims to be Microsoft, but I'm wary. Any thoughts on that? I can get more specific if you want.

WGA stands for windows genuie advantage, which is a fully licensed and offical mircosoft service. It simply validates your copy of windows, so unless your running a hacked copy there nothing to fear.

 

[Zosephine]

Wow, I didn't know Firefox was .org! Thanks for making me slightly less of a nooblet.

I'm actually getting a laptop soon, and viruses are a big concern for me. Thank you for the info. =)

On another note, some older Dell desktops that I have come across have started asking me to get this "WGA Notification Program" or something. Claims to be Microsoft, but I'm wary. Any thoughts on that? I can get more specific if you want.

WGA stands for windows genuie advantage, which is a fully licensed and offical mircosoft service. It simply validates your copy of windows, so unless your running a hacked copy there nothing to fear.

oh sweet. You never really know these days, so thank you.

 

[johnman]

No

Wow, I didn't know Firefox was .org! Thanks for making me slightly less of a nooblet.

I'm actually getting a laptop soon, and viruses are a big concern for me. Thank you for the info. =)

On another note, some older Dell desktops that I have come across have started asking me to get this "WGA Notification Program" or something. Claims to be Microsoft, but I'm wary. Any thoughts on that? I can get more specific if you want.

WGA stands for windows genuie advantage, which is a fully licensed and offical mircosoft service. It simply validates your copy of windows, so unless your running a hacked copy there nothing to fear.

oh sweet. You never really know these days, so thank you.

No problemo!