This morning a friend of mine was playing a game on Facebook and noticed popup messages saying she had 6 Trojan viruses on her computer and Windows needed to remove them right away. The messages appeared be from "Windows Security" and even had the little Microsoft shield on them. Although the messages stressed urgency in letting Windows Security remove them, my friend stopped everything and called me (lucky she did!).
If she had accepted the messages, she would have installed one of the worst malware, rogue programs currently circulating on the internet.
This rogue program is known by many names, but it's best known as Windows AntiVirus - and it's a really bad program to have on your computer. It literally holds your computer hostage for money - and even after you pay, it continues to ask for more.
Here's where it gets tricky. Even when the program hasn't been installed yet on your computer, it's difficult to close the warning messages which are trying to trick you into installing the program. When you hit the red "x" to close the window, a new popup appears advising you to remove the viruses before closing windows and your choices on that window are "OK" and "CANCEL". Clicking OK is the WORST THING YOU CAN DO (as it will install the program). But clicking CANCEL just brings up new popup messages stressing urgency to remove the program. The goal is to fluster you into clicking OK.
The only way to close the windows at this point is to do a CNTRL-ALT-DEL on the keyboard to bring up the task manager. Then click the Applications tab, highlight each program listed and click END TASK. Be sure to click END NOW also on any subsequent popup messages. This will close out everything you had open (including email and your internet browser), but it will keep you safe.
The next step is to update your antivirus software and run a full scan just to be sure you don't have any viruses on your computer.
If you do notice more popup windows on your computer (while not connected to the internet) telling you have you have trjoans (especially if the program has a windows shield on it), chances are your computer is infected with the malware program. If that's the case, click here for removal instructions.
