Scam: An Online Anti-virus Scan

This stuff should be outlawed. A certain web site lies to you in an attempt to sell you some worthless anti-virus software.

I recently visited a new web site I had not seen before. A pop-up window appeared and warned that my computer system might be infected with a virus. It asked if I wanted to perform a virus scan. I dislike pop-up ads and never buy anything from such obnoxious advertising methods. I clicked on "Cancel." The system seemingly ignored my cancel request and then appeared to launch a disk scan of my system. Three or four seconds later, the "disk scan" completed, and dire warnings appeared with lots of words in a bright red font. The pop-up was labeled as an "Online Windows security scanner," and it claimed that my computer was infected with viruses.

I was immediately suspicious: there is no way that any program can scan my 250 gigabyte hard drive in only 3 or 4 seconds. A proper scan of that much data would require several minutes.

The warning listed several DLL files (dynamic link libraries) that were supposedly infected with viruses and then also said that my copy of Internet Explorer 7 was infected with a virus. The warning also listed several programs as Windows spyware products installed on my system. Finally, it claimed:

     Total infected files detected: 45

The pop-up window recommended that I purchase a virus removal tool from the company that created the disk scan in order to "protect my system."

There is but one problem: I was using a Macintosh. Macintosh systems don't have DLL files and cannot run Internet Explorer 7, a Windows-only program! In other words, there is no copy of Internet Explorer on the system, and there are no DLL files there either. There are also no Windows spyware programs running as the system won't run Windows programs. This "Online Windows security scanner" pop-up ad claimed that I had viruses in programs that do not exist on my system!

The ad also had a prominent image of a locked padlock and the words "Encrypted Secure Site." However, a quick check of the web browser shows that it isn't encrypted. The ad lies to you.

The ad is a scam, designed to frighten people who are not computer experts into purchasing a worthless piece of software they do not need. The pop-up claimed to be an "Online Windows security scanner," but it really isn't a scanner at all. It isn't even a Windows program. 

Most of the people who encounter this scam will be Windows users, and some number of them will believe what the advertisement claims. Some will even purchase the worthless service the company sells.

This type of scan is referred to as “scareware:” the advertisement tries to scare you into purchasing something you don't need.

Here's my advice:

1. If you have a Windows system, always run anti-virus software and keep it up to date. (Many people purchase and install anti-virus software, then never update it. That's a waste of money; if you don't update it daily or weekly, then why bother to even purchase it?)

2. There are many reputable anti-virus programs available. Never purchase one from an unknown source or from any advertisement that suddenly pops up on your system.

3. If any ad or service claims that you have a virus, consider that to be a POSSIBILITY, not a fact. Then obtain a proper anti-virus scan from an independent source and check it out.

NOTE: There is a great FREE anti-virus scanning service available at http://housecall.trendmicro.com. Use that to scan your Windows system, not a product from an unknown company that pops up advertising on your system. (You can easily verify the worthiness of http://housecall.trendmicro.com in a quick search on Google or any other search engine; lots of virus experts recommend it.) Never accept the word of an advertisement that appears on your system; always get a second opinion.

4. If a pop-up ad for anything suddenly appears on your screen, hang onto your wallet tightly. Not all pop-ups are scams, but many of them are. Whether it is a scam or not, pop-ups are an obnoxious advertising technique. Do you really want to do business with a company that uses such intrusive advertisements in an attempt to sell you something you really didn't want?

The world is full of con artists. Some of them will claim that you have viruses and spyware. Don't believe them; get a second opinion before spending any money.

Comments

[Rhonda]

I had the same pop-up, but I couldn't exit out of it. I had to close the tab to get rid of it. I was on my internet provider's website when this happened. Annoying!

[Mike St. Clair]

Unfortunately, if you buy and install some of these scams, you can also be faced with a difficult cleanup to remove the installed software. Note that if you ever do get suckered into buying something like this, you may be able to get your money back via your credit card company.

[Jeff Piper]

Microsoft and Washington State Attorney General have filed suits against these "scareware" purveyors. See http://news.bbc.co.uk/1/hi/technology/7645420.stm for the story

[Rae Williams]

AVAST is another reputable free anti-virus program. I have used it for over a year, traveling to all kinds of genealogy sites that may be haunted by malware.

I taught computer security for my company for seven years. The advice to Google anything that is presented to you is good. You can google the name or the message that pops up; you will almost always find useful information.

[Donde Smith]

Amazing! I had the same(?) 45 infected files on my Mac! Glad to hear there is a suit!

[JT]

There are many dangers with this supposed antivirus program if it gets into a computer running Windows.
1. It infects the computer and must be properly removed.
2. It makes changes in the system that must be corrected.
3. If you give them your credit card info, you will be charged for worthless software.
4. In at least one case there was a further charge made to the credit card about a month later - so you may have to cancel your card if they get the number.

[PWR]

I use both an anti-virus and firewall (McAfee) which I have set for automatic updates, yet I still manually update at least once a week to be assured I have not missed any. When I encounter the pop-up you described, I immediately press control-alt-delete and blow out before any action (hopefully) is initiated by the invading program. It's better to escape and log on again that take any chances these scammers may get into your machine.

[Roy]

Dick,

You said: >

When one sees one of these pop-up windows, one should never click on any of the "buttons" in the pop-up window. They are usually not really buttons -- any click anywhere inside the window will be a "yes" click. One should instead click on the "X" in the top right frame of the window (or equivalent in non-Windows systems) to kill the window.

[Doug]

Exiting the browser window can disrupt a thread of thought or research, sometimes exiting the entire browser program. A better solution, in my experience with the same pop-up, is to click your "back" button and get off the page that way. I'm not saying this will work in all situations, but try that first.

[Roy]

Doug: I meant that you should click on the X of the small pop-up window to kill it, not the main browser window!

[Terry Mulcahy]

Hi Dick,
Wouldn't it be easier to just block all pop-ups? Most browsers have that option. Then you wouldn't be subjected to any of these scams.

[theKiwi]

-->Wouldn't it be easier to just block all pop-ups? Most browsers have that option. Then you wouldn't be subjected to any of these scams.

This is generally true, but then sites that rely on popups - like printing postage online at USPS won't work as they can't pop up the window with the postage label in it. I use Safari which doesn't allow individual site preferences for pop ups.

Roger

[Jan Levie]

I got hit with this virus and had to take my computer in to get it cleaned out. I couldn't close it out. Their screen stayed in the middle of my monitor no matter what other program was running underneath. Naturally, it was just before I was going on a family history vacation and desperately needed my computer. You have to admit, it's a pretty clever scam--they not only get your $49 or $99 for the worthless software, they also get your credit card information--and I'm sure they're not above using it either!

[Jon Ackroyd]

Pop-up blockers like Quero and Google Toolbar are so effective at stopping these things that I have not been hassled this way since I installed them - free - a couple of years ago.

Either can be turned off to allow a legitimate pop-up to show with 1 click.

There is often NO PLACE you can click on the screen to get rid of it without a serious chance of incurring problems. This is called 'clickjacking' On a PC the only safe way out is CTRL-ALT-DEL, choose the offending Window and then end the process.

As you show a little education about this stuff can pay off big time.

Just yesterday a new student told me that the day before class this same thing happened to her husband. They had no blocker and they are now out of pocket 60 bucks for a useless program they were suckered into buying. And who knows what further horrors await them.

[Mary W.B.]

All downloads I make are always done through Kim Kimando's website, if you are not familiar with her she has a call in national radio show and is a computer expert, has had a show for many years, go to her website where you have links to various free anti-virus, virus scanner programs, free firewalls etc. and these have all been checked out by her and her staff already...kimkomando.com

[Gordon Banks]

It IS illegal. It is fraud. The problem is convincing the proper authorities to go after them.

[joyce]

Just a note that it appears to download the full version of TrendMicro, you need to choose one of their sales offers. The one-time House Call scan seems to be free.

[Brenda]

My husband does some freelance computer consulting occasionally, and a few months ago he had a client who fell for this scam. Usually it will only take a couple of hours and simple software to get rid of viruses, etc, but this one was particularly insidious and hard to nail down. It took the better part of a 3-day weekend and some special software tools to clean off the computer. Plus, later the client told my husband that he found $300 in fraudulent charges on his credit card from the scammer(s). Ugh.

[Dennis Lohr]

Alt+F4 closes an open window on a PC (pop-up or otherwise).

As some have alluded to, the "X" that typically closes an open window is disguised in this case. It's actually the "Yes" part of "Click Yesto Install?"

Alt+F4 avoids the click, and therefore the virus.

[Harry Brion]

A similar situation is the Registry Cleaners.
They are a good way to speed up your Windows because afer using them you will probably need to reload Windows.