Sophos: Fake anti-spyware for Windows spotted

Sophos reported that a new fake anti-spyware software solution company has been spotted  on the web, attempting to reach users' computers in order to trick them to buy the full version of the application. Just like many other similar scams in the past, the program launches fake security warnings supposed to convince the user that the […]

Sophos reported that a new fake anti-spyware software solution company has been spotted  on the web, attempting to reach users' computers in order to trick them to buy the full version of the application. Just like many other similar scams in the past, the program launches fake security warnings supposed to convince the user that the full version of program is really needded. Buying the software does nothing more than stealing your money so, in case you have doubts that such a malicious tool reached your system, scan it with a legitimate antivirus product.

Getting back to today's Sophos Trojan alert, the Troj/FakeAV-M only affects Windows operating systems and display a balloon notification: "WARNING: Your computer is infected. Windows has detected spyware infection! Click this message to install the last update of Windows security software."

According to Sophos, "When first run Troj/FakeAV-M changes/sets the following registry entries to run itself on startup":

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun<br />&lt;Random CLSID&gt;<br />&lt;Pathname of current file&gt;

Source:→ Softpedia

Sophos, Security, Anti-spyware, Malware, Trojan