Michal Krejdl

13 February 2013

Avast antivirus 2012 trial? No, just a scam

I don't know what kind of curiosity leads people to the dark corners of the internet, when they want to obtain a new version of antivirus software. It's somehow irrational to find security software at insecure places. But.... it happens.

FP submission FP submission

As you can see, the file name is Avast_Antivirus_2012_Trial_Verion.exe - but it is definitely not a proper setup released by us. Here are some facts, that are worth remembering:

  • we don't distribute new versions through grayzone portals. The best way to download recent version is to visit www.avast.com
  • our original setup package is properly signed with a valid certificate
  • our original setup has a typical "a" icon

The mentioned file from FP submission was not downloaded from the official source. It has no digital signature and no icon. In fact, it is a dangerous bootkit dropper - Sirefef/ZeroAccess - which no one really wants to have.

VT analysis: http://www.virustotal.com/en-gb/file/990974a2a557796c8ad2a8fbd1cd59a1867a8557f7a5fe7fb9e508f52874ce3f/analysis/1360768918/

 

Threat Research, Security News

Franklinite

So, as I have downloaded this program from download.cnet.com, are you saying I am at risk? What sites which partner with you would be safe to download from? Thanks!

Michal Krejdl

@Franklinite
Cnet.com is a respected and trustworthy download provider. The setup obtained there is properly signed by us, everything is fine and legitimate.

ludoles

I always check out this website before buying anti-virus software - www.windowsmac.com - My personal favourite is AVG because it does what it says and i like the fact that it's as unobtrusive as possible.

Clearspace

@ludoles and anyone: Websense ThreatSeeker reports http://www.windowsmac[.com] as a malicious site through VirusTotal. Install VTzilla for Firefox, Chrome & IE @ http://www.virustotal.com/en/documentation/browser-extensions/ and right click a hyperlink choosing 'Scan with VirusTotal' for approx 30 virus scanners reports before you visit it. This is just a start to really research a site. The controversy over 'Websense' and 'WOT' has become understandable as i understand more and do my own research. As usual thanks Avast for putting your hearts into a continually refined product that is not "dummied" down!

Judith

"avast! antivirus account – please confirm" -- Is this a scam?

I just received an email with this text:

You recently registered an AVAST Account for your avast! antivirus.
Please click this link to verify your account:
https://id.avast.com/en-ca/confirm/registration?token=Qhd0gMDG9L8e6hF0saJIfJfPSlspGk0JO1HuO3LNJrJcUeuqll
NOTE: Information email only – PLEASE DO NOT REPLY

Although I do use Avast! I haven't registered anything *recently*, so I'm wondering about this email? Does anyone know?

Judith

Wake up

It's a scam