16 December 2009

Caution, counterfeit! A Trojan imitating an antivirus.

Recently, malware samples imitating real antivirus products from various vendors have been appearing frequently on the Internet. One such program discovered by our specialists is the Trojan Trojan.Binary.Win32.FakeAlert.nano. This malware displays fake scan results telling the user that their computer is infected. The Trojan offers the user to buy an antivirus program with a name similar to NANO Antivirus, supposedly able to remove the alleged malware from the computer.

Infection occurs as follows: when visiting infected websites, a pop-up warning appears stating that the computer is infected. Clicking the message takes the user to a page imitating an online antivirus scanner, which also displays a false infection message and recommends installing the fake antivirus.



When this "antivirus" is installed, it configures itself to start automatically and performs a "scan", during which a message appears offering to buy software that will supposedly clean the user's computer of infection.

We warn our users that genuine NANO Antivirus never performs an online scan of a computer without the user's knowledge! We also remind you that our product is completely free.

You can download the full-featured genuine NANO Antivirus free of charge at www.nanoav.ru.