Masbuchin

Thanks to VG who mentioned this threat in his blog: Beware of “Anti-Virus-1? – Another Fake Anti-virus in Town

There are many Rogue Antivirus coming out this year, what I remember is Rogue Antivirus 2009. And now, with the same method like Rogue Anti-Virus-1 is coming out and spreading.

Anti-Virus-1 is using fake scanning process in order to scam their users. Just like Panda Lab’s said:

It is designed to simulate a scan of the computer, supposedly detecting thousands of strains of (non-existent) malware. The end aim is to sell users a pay version of the fake antivirus in order to eliminate the threats.

This post has a purpose to warn us about this threat, and what I suggest is never install anything suspicious on your computer, Anti-virus-1 and another Rogue Antivirus has same method to infect:

1. It’s using online advertising to promote and spread the virus.
2. The ads is blinking and act like normal Window, contain text which shows that you are infected, in fact you are not!
3. If you click the ads, you will be told that your computer is infected, you need to download the antivirus.
4. You downloaded the AntiVirus, and your nightmare begins.
5. You will be prompted to scan whether you agree or not.
6. The scan result contains many windows genuine files but recognized as virus/malware
7. In order to remove the virus, you will be forced to pay.

How to Remove Anti-Virus-1

Fortunately, when I searched on google, there are kind folks who also post about this type of attack and how to remove Anti-Virus-1. PCTools itself released a free removal for this.

1. Antivirus-1 Removal Guide from BleepingComputer
2. Anti-Virus-1 Removal | Lancelhoff.com from lancelhoff. Contains manual removal for this threat.

And I got youtube videos if you like it:

Using Malwarebytes:

I’m looking forward about this Rogue Antivirus, please tweet me if you have an update. If you like this post, I’d like to ask you a question, What is Your Favorite Antivirus? Please leave a comment there. Thanks.

Related articles by other bloggers:

• Filterbit Scans Uploaded Files for Malware (appscout.com)
• Google’s DoubleClick spreads malicious ads (again) (theregister.co.uk)
• VirusTotal Uploader Quickly, Easily Scans Any File (lifehacker.com)
• Sunbelt Software – Show Stoppers 2009 (geeknewscentral.com)
• How to clean an infected computer (vault9.net)

Anti-Virus-1: Another Rogue Antivirus Removal Guide is posted on March 2nd, 2009 by buchin. This post is filed under: Rogue, Anti-Virus-1, Antivirus, Malicious Software, malware, Rogue Antivirus, Scan, Security, Virus, Viruses, Window .

Tagged with:

rogue antivirus 1, javascript rogue antivirus, guides to rogue antivirus