http://googleonlinesecurity.blogspot.com/2010/04/rise-of-fake-anti-virus.html

This looks suspeciously like what happened to one of the computers here 
at work the other day. The AV software insists that there's nothing 
wrong even after multiple scans, but when a certain user logs in, 
windows pop up all over the place warning of a dire malware infection.

Now I can understand visiting a website and getting a browser window pop 
up rendered to look like the Windows Security Center (although isn't the 
titlebar supposed to indicate it's a browser window?), but I am 
mystified as to how this software can open windows just because somebody 
logged into the PC. This surely indicates that something has been 
installed locally. And yet repeated AV scans detect nothing...

In the end, erasing the user profile silenced the popups forever. But 
I'd still wondering how the hell it got this way in the first place.

Post a reply to this message