Rogue anti-spyware versions

April 25th, 2008
AddThis Social Bookmark Button AddThis Feed Button
One of the things that create a lot of misinterpretations when it comes to rogue anti-spyware programs are all the different versions they appear to come in. Some find it to be a sign of legitimacy, when they see a version number at the end of a program's name, or rather the notion that before "version 3.2" there was a "version 3.1". This is a false assumption, albeit only to some extent. It is true that the program itself doesn't change at all - there's nothing that can change - the files, however, do change, presumably so that the parasite would be more difficult to dispose of, since it takes time to update databases and many companies make the mistake of ignoring such updates, thus leading to someone's failure at removing the parasite.

There are many examples of this behaviour, but the most recent one is Awola, which just became Awola 6.0. Some others are MalwareBell 3.2, Files Secure 2.1 and 2.2 and many more. Usually it's not too difficult to guess the changed file names - just add a version indicator at the end of any file consisting of the program name only; there may, however, be other file changes also, which are less apparent.

Version numbers are no indication of a programs legitimate nature, so beware and don't fall for this trap.


Comment on Rogue anti-spyware versions