Had a trojan calling itself AVG 2011 installed on one work computer yesterday by an inadvertent click of a popup by a co-worker. Because we also use real AVG on these systems it was easy for the user to click and install the trojan .. oh, the social engineering. It also installed and called itself AVG 2011, further disguising itself to the casual system user. It was quickly isolated and removed by uninstalling the new AVG 2011 program and cleaning using MBAM from safe mode.
Interestingly, that same day had another case popup from a client with a laptop. This one called itself 'System Tools' and had to be removed in much the same way.
Users always ask why their existing antivirus programs did not protect them from their foolish clicking. The answer? I suppose that todays antivirus programs are only and can only be designed to protect you from known threats. They are no good at brand new ones, which is why they are always trying to update themselves online.
Be safe out there!
Interestingly, that same day had another case popup from a client with a laptop. This one called itself 'System Tools' and had to be removed in much the same way.
Users always ask why their existing antivirus programs did not protect them from their foolish clicking. The answer? I suppose that todays antivirus programs are only and can only be designed to protect you from known threats. They are no good at brand new ones, which is why they are always trying to update themselves online.
Be safe out there!
RSS Feed
