Saturday, December 5, 2009

Can you tell which of these are rogue antivirus?













In fact, all of the examples shown above are images of Fast Flux Rogue Antivirus malware that will pop up in your browser. A whole host of servers and people's computers have been infected with what are called "Fast Flux Rogue Antivirus" malware. I decided to write this blog post, because Accuweather is one of those very popular websites that is currently hosting this malware without their knowledge. These viruses are cleverly disguised to look just like your own antivirus software, which makes them difficult for most people to catch.

If you have something like this pop up, do not hit "close" or "cancel" buttons that are within the screen, as these are javascript buttons that are easily written to do a whole host of actions, not merely closing or cancelling the window that's open. Instead, you have to hit the 'X' on the little button on your browser's chrome (upper right corner) or hit control-alt-delete to access the processes tab, and close down the specific browser window process (or browser completely).

Here's one part of the solution: Use Google Public DNS or OpenDNS. DNS, if you didn't already know, is a domain name server. You type a name (www.yahoo.com) and the DNS fetches the actual IP address (69.147.76.15) and sends you to the correct address. With Google Public DNS or OpenDNS, you are bypassing your ISP's or someone else's DNS that may direct you to a site other than the one you were looking for...preventing some of the phishing attacks you will come across throughout the internet.

No comments: