DebugQ - De:Bug:Q

Go Back   DebugQ - De:Bug:Q > MIS > Windows Applications
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Thread Tools Display Modes
Unread 10-07-2019, 07:37 AM
Debugger Debugger is offline
Join Date: Oct 2007
Posts: 941
Default SEP: Web Attack Fake Tech Support Website 107

SEP: Symantec Enterprise Protection:

Web Attack: Fake Tech Support Website 107


Reply With Quote
Unread 10-07-2019, 07:40 AM
Debugger Debugger is offline
Join Date: Oct 2007
Posts: 941


Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

This signature detects a fake antivirus scan page that displays false virus scan results.

Additional Information

This signature is designed to prevent access to sites that redirect users or perform actions to trick users into calling the scammer and installing misleading applications such as fake antivirus software.

The creators of misleading applications often use web pages with fake antivirus scanners in order to convince users to download and run an executable file. They may also use intermediate sites that redirect users from the site they are visiting to another one offering misleading applications for download.

Misleading applications such as
fake antivirus scanners
("" Trojan.FakeAV ) or
bogus disk defragmenters
("" UltraDefraggerFraud)
are designed to mislead users into thinking that their computer has serious problems that must be fixed by paying for a license of the software.

For example, a fake antivirus scanner may perform fake scans of the hard disk and then report multiple non-existent threats. To remove the threats, the misleading application tells the user to purchase a license for the software which may amount to anything from forty to one a hundred dollars plus, depending on whether a "support" package is purchased or not. Of course the software and any support packages offered are bogus and will offer no help whatsoever in cleaning up the problem or protecting against any other threats.

Newer generations of misleading applications may also cause instability on the computer such as moving files around, hiding them, or preventing access to certain resources. This is done to coerce the user into buying the fake software.

Various operating systems

No further action is required but you may wish to perform some of the following actions as a precautionary measure.


Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

All times are GMT. The time now is 10:52 PM.

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
DebugQ - Debug Quote - De:Bug:Q