Topic Centers

Misleading Applications

print this page

Forensically Speaking

Misleading applications typically strike people when they are surfing the Web and intentionally misrepresent the security status of a computer in an attempt to convince the user that he or she must remove potentially unwanted programs or security risks (usually nonexistent or fake) from the computer. The application will hold the user hostage by refusing to allow him or her to remove or fix the phantom problems until the “required” software is purchased and installed.

Getting a Positive I.D. on the Perp

Misleading applications often look convincing—the programs can resemble legitimate security programs and often have corresponding Web sites with user testimonials, lists of features, etc. If a strange security message has ever popped up like an advertisement while you're surfing the Web, or if you’ve seen an unexpected balloon message appear from an unknown program on your system, telling you that you’re infected with a new threat, you have already encountered common tactics used by a type of program Symantec calls "misleading applications".

Once installed, misleading applications exaggerate or make false claims about the security status or performance of your system, then promise to solve these bogus problems if you pay them.

Known aliases of misleading applications

• WinFixer
• Ultimate Defender
• SpySheriff
• MalwareWipe
• DriveCleaner
• AVSystemCare
• 1stAntiVirus
• VirusBurst
• SpywareQuake
• AntispywareSoldier

Protect Yourself: Skepticism Is Your Concealed Weapon

• Be especially cautious when clicking on pop-up advertisements—especially ads promoting system security or performance tools that look like a standard Microsoft Windows™ alert
• Do not accept or open suspicious error dialogs from within the browser
• Use Norton Internet Security to proactively protect from spyware and other security risks
• Configure the firewall in Norton Internet Security to block unsolicited requests for outbound communication
• Purchase security and system performance software from reputable sources
• Keep software and security patches up to date