Tag Archives: scareware

A fictional story about a guy who did everything wrong one day

Hi there.

My name is Johnny, and I had a busy day today.

I woke up around eight because I had a new job as a secret shopper. I got an email a couple weeks ago, and they hired me on the spot when I responded. Yesterday, an envelope arrived with a check and my first assignment.

I headed to my bank around nine. At first, the teller didn’t want to cash the check because I only had six bucks in my account, but I whined and got in her face and demanded to talk to the manager until she relented. “That’s a cashier’s check,” I told her in no uncertain terms. “Those are the same as cash.”

I left the bank with $2,700 in my pocket and headed to the nearest Western Union location. The guy there kept asking me questions about the money I was wiring, so I finally told him it was for a relative in Canada, just like the secret shopping company told me to do. It was a little annoying the way he wouldn’t leave me alone. I’m going to put that in my report for sure.

By the time I was done, it was only ten o’clock. I had made $150 for less than an hour of work! I could get used to this lifestyle. I decided to head home.

The phone was ringing when I came in the door. I ran to answer, and this guy from the county courthouse was telling me I was going to be arrested for not appearing for jury duty.

“But I never got a letter that said anything about jury duty,” I said.

“That doesn’t matter,” he replied. “The fact is that you didn’t show, and an officer will be stopping by later today to make the arrest.”

“But…isn’t there some way I could just do jury duty another time? I didn’t miss on purpose.”

“Let me see what I can do, sir,” the man said. After a minute on hold, he told me I could just pay a fine and the whole thing would be taken care of. I gave him my name, date of birth, Social Security number and some credit card information to pay the fine. I was relieved when I hung up the phone. Crisis averted.

The mail had arrived, but it was nothing but a pile of credit card offers. I threw these in the trash unopened. Nobody’s going to rip me off.

I sat down on the sofa to unwind with some TV. It was mostly talk shows at that time of morning, but there was a news broadcast between commercials that caught my eye. It gave some phone number you could call to get your debts eliminated. I have a lot of debt, so I wrote down the number. It seemed like a strange place for a news alert, during the commercials, but whatever. There was a ticker on the screen and some footage of the President, so it must be some kind government program, right?

I went to the computer to write up my report for the secret shopping job. I hate my computer. It came with this virus protection software, but the only thing it’s done for the past two years is tell me my subscription is expired. It’s annoying. Plus, when I opened my web browser (Internet Explorer 6) and tried to visit a website, this window popped up offering a free virus scan. I clicked “OK” and it found like ten infections. The software that came with my computer doesn’t even work!

After the scan, there was a window that wouldn’t go away, so I just closed the browser and checked my email. There, a miracle happened. It turns out I was entered in the lottery up in Canada, and I won! $2,500,000, all for me. I called the claims agent right away. It turns out there are some taxes and fees I have to pay first, but that’s okay—they’re going to mail me a check. I think I may retire from secret shopping. After all, with two-and-a-half million, I’m going to be pretty much set for life.

I’m not going to tell anyone about it, though. I don’t want everybody asking me for money.

My name is Johnny, and I made at least ten mistakes today, if not more. Can you spot them all?

Ransomware: It’s a fake virus scanner, only more violent.

Last September, I wrote about fake virus scan pop-ups that you sometimes encounter while using a web browser, sometimes known as “scareware.”

What I didn’t cover was a class of malicious software known as “ransomware,” the fake virus scanner’s more violent cousin. The difference?

  • Scareware: tries to trick you into purchasing useless software and probably installs spyware, adware and other malware.
  • Ransomware: poses as a virus scanner, but locks up your computer and forces you to purchase useless software to unlock your computer. Also likely installs a bunch of other malware, in addition to the fact that you’ve just given criminals your credit card number.

It’s kind of the difference between a con artist and a mugger, I guess.

There’s no real way to tell offhand whether a fake virus scan pop-up window is scareware or ransomware. It doesn’t really matter—you don’t want it either way. The same rules for prevention apply in both cases.

Both start the same way: you visit a website and a window pops up that tells you your computer is infected with a virus. The pop-up almost always has an “OK” and a “Cancel” button. Do not click on either of these, because they both install the malware.

You can click on the “X” in the upper-right corner of the window, but I don’t even like to do that. I use “CTRL-ALT-DEL” to force the browser to close. I think the Mac version of “CTRL-ALT-DEL” is “Command-Option-Escape.”

After I’ve shut down the browser, I run a virus scan and a spyware scan. It’s sort of a pain and it takes a while, but too many people value convenience over security, and they end up paying for it. There are very few instances in which it’s not possible to find something else to do while your virus scanner runs. You don’t have to be on the Internet 24/7, you know.

Now, I’m not one to tell anybody what brand of web browser to use, but I will say one thing on the topic: since I switched from Internet Explorer to Firefox with the NoScript plug-in, I haven’t had a single scareware window pop up. I’m not telling you what to do. I’m just sayin’.

Also, I know it costs money, but you cannot afford not to do it: install some good antivirus software, keep it updated and keep your subscription current. Norton, McAfee, Kaspersky; I don’t care which one you use, just use something. No, it’s not super cheap, but if you’d rather shell out $79 to unlock ransomware than spend $69 on actual protection…well, in that case I think there’s just something the matter with you.

Finally, for an extra level of protection, install the excellent (and free!) Spybot Search & Destroy. Yes, right now. There is one annoying thing about this software, though, and it’s Microsoft’s fault: in Windows Vista and Windows 7, in order to run S&D properly, you can’t just click on the icon. You have to right-click the icon and select “Run as administrator.” You won’t be able to actually remove anything if you skip this step.

There’s a recent story about ransomware at MSNBC, with a video that shows the malware in action (and actually shows you how to unlock it with hacked registration codes).