Had a call from a distressed friend yesterday. Apparently, the PC she uses at work was infected by the virus that seems to acquire a new name every year. I have also seen it show up as “Antivirus 2009″. The symptoms of this virus are explained here:
Antivirus 2010 is a rogue anti-spyware program from the same family as Antivirus 2008 and Antivirus 2009. Like its previous incarnations, Antivirus 2010 is advertised through the use of advertisements on the Web pretending to be online anti-malware scanners. These advertisements pretend to scan your computer and then state that your computer is infected and that you should download and install Antivirus 2010 to remove these infections. These rogues are also known to be advertised and installed through Trojans that display fake security alerts in your Windows taskbar stating you are infected. Once you click on one of these alerts, it will bring you to the download page for Antivirus 2010, or even download and install it without your permission.
Once Antivirus 2010 is installed on your computer, it will be automatically configured to run when you logon to Windows. This is done by adding a startup that launches the C:\Windows\System32\wingamma.exe executable. This executable will then launch the AV2010.exe and the fake Windows Security Center. Once running, it will scan your computer and list a variety of infections that cannot be removed unless you first purchase the software. This infection will also randomly display fake security alerts on your computer stating that you are infected or have some sort of security risk. If you click on these alerts, it will prompt you to purchase the software. These fake alerts, along with a fake Windows Security Center that advertises Antivirus 2010, are used to further scare you into thinking you are infected so you purchase the software.
Another new addition to these types of rogues is the creation of a fake Blue Screen of Death. At random intervals, Antivirus 2010 will create what appears to be a Windows crash, but in reality is just a fake screen. These fake crashes are used to further persuade you into purchasing the software. If you receive this crash, you can simply reboot your computer , or try pressing Alt-Tab or Control-Alt-Delete to get out of it.
For more info plus screen shots of the virus.. click here> Antivirus 2010
The thing I find interesting is that the virus high jacked internet explorer but not Firefox! This was good because at least Firefox still worked to allow her to download my recommended fix to get rid of the virus. My recommendation is found here> Malwarebytes
This occasion allows me to reinforce a point that I have been trying to make for quite some time. Internet explorer is more susceptible to virus attacks than Firefox! And guess what: AOL uses Internet Explorer as it’s built in browser. Don’t you think its time to go the better, more secure, route and get rid of AOL. Also stop using Internet Explorer and go with Firefox. I will borrow a phrase from Limbaugh here: “Folks, DO NOT DOUBT ME!” Just follow my advice for a better, faster, more secure, computer/internet experience.