How Scareware Tricks Users Into Thinking That They’re Legit

Scareware. n. A type of malware that attempts to trick users into purchasing or installing useless and potentially dangerous software.

I'm sure you're well aware of the many types of malware floating around on the interwebs. One of these is scareware, which basically tries to scare the crap out of you so you'll do exactly what the malware authors want you to do.

An example is the variant that Webroot security experts recently intercepted. It's basically attaches to Windows Explorer and triggers a dialog box that informs users that an adult movie has just been downloaded.

Obviously, this isn't true. The scam goes further when users open a web browser, as the page will automatically redirect to a fake Google page showing results for 'IE Security ZlobTrojan32' warning of possible virus infections--alongside more links directing to adult sites.

Apparently, you searched for "IE Security ZlobTrojan32" on fake Google even though you didn't even know you wanted to, and, judging by the response, fake Google thinks you both (a) have an infection and (b) enjoy watching fake porn on fake YouTube as well. This happens each time you launch the browser, by the way

-- Andrew Brandt, Webroot security blogger

Unbeknownst to the user, six shortcut icons have already been added to the desktop: VIP Casino, Cheap Pharmacy Online, MP3 Download, Cheap Software, Search Online, and SMS TRAP. When click, each of these point to shady sites offering cheap music downloads and other crappy content.

This is just one of the ways that scareware dupes users into doing the malware author's bidding. If some weird or random dialog window does pop up while you're surfing the net or clicking through Windows Explorer, hit exit and run a virus scan ASAP.