Hey! Remember Disk Antivirus Professional? I wrote about it in February, and I think I mentioned that it’s not the last we’re seeing of WinWebSec rogues this year. Well, due to my busy schedule I actually missed one (AVASoft Antivirus Professional), and look at this – WinWebSec rogue for 2013 No. 3 – System Care Antivirus. What does this fake antivirus program do different from its predecessors? Nothing much. Just like other infections from the same group System Care Antivirus blocks exe files, performs a fake system scan, spams you with fake security notifications and blocks Mozilla Firefox and Google Chrome web browsers.
However, System Care Antivirus leaves Internet Explorer be. Why is that? Well, simple – the rogue needs to have a way how to lure your money out of you, because this is the only reason why the rogue enters your computer. I know that System Care Antivirus looks like a decent computer security program, but you know, this is the main idea behind this entire scan – convince you that the program you see is a genuine one, and it really wants to protect your system from harm.
So, when System Care Antivirus “establishes” its goody-two-shoes image, it starts generating a number of fake security notifications that are supposed to make you think this rogue has detected suspicious activity on your computer and you need to take care of that immediately:
Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software…
System Care Antivirus Warning
Your PC is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.
System Care Antivirus Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with System Care Antivirus.
On top of that, System Care Antivirus performs a full system “scan”, and then says that you are infected with such things as Trojan.Win32.Agent.ado, Win32.PerFiler, Win32.Miewer.a and other malware applications. So what do you do about all these “threats”? This is where Internet Explorer comes back into picture.
System Care Antivirus wants you to purchase the full version of the program, and to do that you need to fill out the rogue’s purchase form via Internet Explorer. That is why the program leaves Internet Explorer be – so that you could give away your credit card information to a third party. But I think most of the computer users are smarter than that, right? So what do we do with System Care Antivirus?
Simple – close the program right now and remove it. How? Well, for starters, register it with this activation code:
It does not remove System Care Antivirus, but you trick the rogue into believing that you have paid for it already, and so it unblocks your exe files and pulls back for a while. This is when you need to access a computer security website and download a reliable program that would help you remove System Care Antivirus for good. I know that it’s possible to terminate the rogue manually, but you know, if you’re not a security expert better leave that to a professional program.