PCinfospace

AVG is no longer safe. Fake Anti-Virus programs have figured out how to get around its protection. These fake programs are spy-ware and can steel your identity or badly damage your computer.

What is it?

It is best described by using a definition:

A rootkit is a software system that consists of a program or combination of several programs designed to hide or obscure the fact that a system has been compromised. Contrary to what its name may imply, a rootkit does not grant a user administrator privileges, as it requires prior access to execute and tamper with system files and processes. An attacker may use a rootkit to replace vital system executables, which may then be used to hide processes and files the attacker has installed, along with the presence of the rootkit. Access to the hardware, e.g., the reset switch, is rarely required, as a rootkit is intended to seize control of the operating system. Typically, rootkits act to obscure their presence on the system through subversion or evasion of standard operating system security scan and surveillance mechanisms such as anti-virus or anti-spyware scan. Often, they are Trojans as well, thus fooling users into believing they are safe to run on their systems. Techniques used to accomplish this can include concealing running processes from monitoring programs, or hiding files or system data from the operating system. Rootkits may also install a "back door" in a system by replacing the login mechanism (such as /bin/login) with an executable that accepts a secret login combination, which, in turn, allows an attacker to access the system, regardless of changes to the actual accounts on the system.

Rootkits may have originated as regular applications, intended to take control of a failing or unresponsive system, but in recent years have been largely malware to help intruders gain access to systems while avoiding detection. Rootkits exist for a variety of operating systems, such as Microsoft Windows, Linux, Mac OS, and Solaris. Rootkits often modify parts of the operating system or install themselves as drivers or kernel modules, depending on the internal details of an operating system’s mechanisms.

How do you know you have one of these very aggressive Virus tools?

You will not be able to complete a Virus scan successfully.  It is trying to protect itself from deletion.  Some Anti-Spyware programs may find them but may not be able to get rid of them.  These are deeply embedded in the operating system and may have already done their damage by the time you suspect there is a problem.

What should you do?

Mainly do not wait.  You most likely will need to reload the entire operating system.  They are the carriers of Trojan horse viruses and worms as well as other devastating attacks on your computer and your privacy.  If you do nothing your computer may come to a screeching halt.  You may have your passwords for vital accounts (such as banking) compromised.  Entire bank accounts have been emptied by using this method. If you have a program that will take one of these nasty visitors don’t bet it’s gone.  It may propagate (multiply) and then resurface at a later time. I don’t play around with these.  Just do it right and you won’t have to do it over.

If you do reload your system don’t forget to back up your data.  Once you have it backed up reload your computer and reinstall a good updated Anti-Virus program.  Now scan the files you had backed up before you put them back in the current system.  They may be the source of the virus to start with.

Did you ever type in a web site address in the URL space (know as address bar) and you get a totally different site? If you did you may be hijacked. That is to say you may have downloaded a spyware program without knowing it.
Redirects
A redirect is a special program put in a web page and/or imbedded in a spy-ware program that makes the web browser go to a page different from the one you typed in. This normally happens when you are infected with a virus or spy-ware.
How does this happen?
If you open an infected e-mail or web site you can easily get a Virus or spy-ware program. Even clicking on a picture or link on a web site can infect your computer’s hard drive instantly. New programs called Rootkits can do extensive damage to your computer or gather information about you that can be used for illegal reasons. These programs can run undetected for as long as they are written for. By the time you know it you’re infected it could be to late.
How can I protect myself?
• Do not go on Illegal sites or sites that contain pornography. These sites are designed to cause harm to you or your computer.
• Keep a quality Anti-Virus/spyware program running and activated at all times.
• Do not let you Anti-Virus/spyware program expire. This is the leading cause of infection.
• Purchase a new program every year or two to be sure you have the best protection available.
• Periodically check for updates.
• Scan your system on a schedule. This can be set up right inside the program.
• DO NOT assume you can install the program and forget it.
• Do not install cheap or free Anti-Virus/spyware programs. These normally do very little to protect you from the latest and greatest threat.
Do not underestimate what a Virus or Spy-ware program will do. They can destroy or change your information, they can obtain information that will lead to identity theft and much more.