One of the many things that being a member of the Blogging community permits me to do, is pass on critical information concerning new, or evolving, Internet security threats.
Often I am notified of these threats by readers who either email me directly, or by readers commenting on a particular article.
Such was the case this morning when I received a comment from Mark, a Blogger himself at mark-techwalker pointing out the dangers of PCAntiSpyware a cloned version of the rogue anti-spyware threat PCCleaner. You can read his article on how this virulent piece of malware infected his daughter’s machine on his Blog.
In researching this malware I have discovered that PCAntiSpyware is capable of hijacking the desktop, after it infects a computer, by way of web browser security holes. As well, it can be inserted onto a machine by a number of Trojan downloaders.
As with all rogue security applications, PCAntiSpyware was developed to mislead unaware computer users’ into downloading and paying for the “full” version of this bogus software, based on the false malware positives generated by the application. Of course this application, since it is rogue software, can not detect or remove spyware.
Worse, PC-AntiSpyware has the potential to gather private and personal information from an infected machine. This could include passwords, credit card details, and other sensitive information.
As Mark pointed out in his comments, PC-AntiSpyware relies, to some extent, on social engineering to convince unaware users to install this very dangerous malware application. Remember that you are your own greatest line of defense against social engineering attempts. STOP. THINK. CLICK.
Generally, reputable anti-spyware software is capable of detecting rogue software if it attempts to install, or on a malware scan. But this is not always the case. Anti-malware programs that rely on a definition database can be behind the curve in recognizing the newest threats.
A good partial solution to this problem is to ensure you have installed, and are running, an anti-malware application such as ThreatFire 3, free from PC Tools. This type of program operates using heuristics, or behavioral analysis to identify newer threats.
As well, Malwarebytes, a reliable anti-malware company has created a free application to help keep you safe and secure. RogueRemover will safely remove WinAntiSpyware/WinAntiVirus, SpyAxe, VirusBlast, VirusBursters, as well as a number of other rogue applications.
An absolute must is making sure that the security application you are considering installing is recognized as legitimate by industry experts. An excellent web site that will keep you in the loop, and advise you what products work and have a deserved reputation for quality performance is Spyware Warrior.
PCAntiSpyware quick facts:
- Changes browser settings
- Shows commercial advertising
- Stays resident in background
- Has the potential to steal private information
Categories:
Tags: anti-malware, anti-spyware, antispyware, application, Bill Mullins, computer, download, install, internet, PC, PC Anti Spyware, PC AntiSpyware, PCAntiSpyware, rogue, RogueRemover, Software, Spyware Warrior, ThreatFire3
