Stopping fake "antivirus" programs

[tracyprier]

Hi all

Every now and then one of our computers gets hit with one of those fake antivirus programs. The latest is the "windows xp recovery" one.

Is it possible to stop these via untangle antivirus or even another of the UT modules?

thanks
Tracy

[sky-knight]

Most of these buggers are getting in via out of date Java installations, or ancient non-updating Acrobat Reader 8.0 installs.

Untangle's AV helps, as does strong desktop AV. But if you want to prevent them, update your stuff.

[dashpuppy]

Most of these buggers are getting in via out of date Java installations, or ancient non-updating Acrobat Reader 8.0 installs.

Untangle's AV helps, as does strong desktop AV. But if you want to prevent them, update your stuff.

Very true.

Most people just click NO don't update and ignore the fact that updates are important.

[f1assistance]

If users have unhindered access to the interweb along with permission to run/install, and you marry this with their curiosity and compulsive need to click, malicious software taking up residents on that machine cannot be stopped...
I personally appreaciate SSL/TLS for my own privacy, but am concerned and frustrated with the lack of visibility and control realized as an admin.
It's the age old game of cat and mouse with no end in site...stay tuned as the saga continues.

[dashpuppy]

If users have unhindered access to the interweb along with permission to run/install, and you marry this with their curiosity and compulsive need to click, malicious software taking up residents on that machine cannot be stopped...
I personally appreaciate SSL/TLS for my own privacy, but am concerned and frustrated with the lack of visibility and control realized as an admin.
It's the age old game of cat and mouse with no end in site...stay tuned as the saga continues.

Good thing Ubuntu is free and MORE Support than ever before!

[sky-knight]

A change in OS will not cure the end user of bad habits. I don't care how good it is, the threats will simply change to match the new paradigm.

[Tango_Kilo]

Also the fact Java runs on *nix as well, there are cross platform attacks. I can't help but feel a bit of schadenfreude with the recent wake up call Mac users have gotten from Mac specific malware.

The big 3 to patch or disable are Java, Flash Player and Acrobat (and/or Reader). Truly any PDF handler if you wish to be honest, Adobe just has more attack vectors than others, but none are fully immune from a malicious PDF. Taking simple steps to disable Java, opening 3rd party files and multimedia content (all are enabled by default) within your PDF handler go a long way towards protecting against the "next" wave of PDF based attacks.

[Danp]

I actually got hit with one of these for the first time today. Looks like AndroidCentral is under attack and spreading malware.