Security Shield, System Security, Antivirus System 2011...with names and interfaces designed to imitate legitimate security programs, it is no wonder that there is confusion surrounding rogue antivirus programs. These rogues seek to capitalize on our need to keep our machines and our data secure, but instead of providing protection, they offer ultimately useless software. When you learn to recognize the signs of one of these rogue programs, you can help keep all of them out of your system.
Introduction to Security Shield
Rogues like Security Shield are not typically known for their originality. They tend to behave in very similar ways, and, in fact, this program is a clone of System Tool and Security Tool. The silver lining to this is that it makes it a bit easier to identify a rogue. Like all other rogue antivirus programs, Security Shield's objective is to persuade computer users to buy their "fully licensed" software to protect their systems and data. To do this, it creates the illusion of security threats. Unfortunately, any "protection" it can offer is also an illusion.
Methods of Entry
This rogue antivirus program, like most others, uses a well-traveled highway into your computer. It most commonly comes in with a trojan. The Zlob trojan, for instance, is disguised as a video codec. If you click on an affected video (usually freeware), you may be prompted to download the codec, ActiveX, in order to view the video. When you do, Zlob enters your system and deposits its malware passengers. Sites that are particularly vulnerable to trojans include those with adult, pirated, illegal advertising, gaming, P2P, and free content, as well as spam emails and attachments.
It is also becoming more common that rogue antivirus programs like Security Shield are advertised on malicious sites that pop up surrounding hot trending topics. Big news events are always fodder for these types of rogue sites, which advertise and possibly download, rogue programs. Of the most frequently searched for topics, it is not uncommon for ten percent of the first 100 results to be malicious.
Security Shield's Behavior
As with other rogue programs, this one makes itself known primarily through pop-up ads. These mimic security warnings from legitimate antivirus programs. Users will be warned that infections or threats have been found and that the only way to resolve them is to install the paid version of the program. The pop-ups will appear whenever you are online, and they may also affect your performance when you are offline. Other symptoms include:
* New icons on your desktop or system tray. If clicked on, these will result in more pop-ups.
* Slower computer performance. Security Shield launches itself each time you turn on your computer, and it remains running constantly in the background. This diverts resources away from your legitimate programs. You may find that web loading times are slower, and even simple tasks, like opening documents, takes longer.
* This rogue may also change your desktop background and display a security warning.
The pop-ups and other symptoms are designed to convince you that you need to pay for their software. But this will not protect your computer – or even get rid of the rogue. If you notice any signs of a rogue antivirus program like this, take steps to remove it immediately.
Loading...