

I have seen examples of this type of fake webpage being linked from advertising links. Noting the website that displayed the message is good idea as you can notify the webmaster (if it’s a legitimate website). This file is the infection and, if ran, will infect the PC and start displaying pop-ups (like the one in Figure 2).Īt this stage, the PC is not infected so it’s safe to close the browser and ignore any alerts from the website.

The websites’ primary function is to get you to run a “removal tool” called “security cleaner”. These websites will normally only stay active for 24-48hrs before they are pulled down. The first is that it’s a website message and not a program the second is that location of the web site will be a random string of letters. There are a number of ways to figure out that this is a false alert. The current scam will display a webpage that is very similar to the one in Figure 1.
