Feeds

Warning over rogue anti-spyware app

False alarm alert

High performance access to file storage

A rogue anti-spyware application is falsely identifying popular security products and file system tools as spyware. Security firm SurfControl advises users not to touch the application, UnSpyPC, with a barge pole.

False-positive reporting is hardly unknown across many supposed anti-spyware applications, as SurfControl notes, but this case is particularly severe since UnSpyPC could disable critical security and business applications.

"Rogue Anti-Spyware products can be seemingly professional branded products, often having a well-designed website with little or no information available to a user to indicate the malicious intent of a rogue anti-spyware application," said Susan Larson, VP of SurfControl's Adaptive Threat Intelligence service. "Rogue anti-spyware can perform fake scans across a user's machine and report legitimate applications as spyware files. If a user takes the recommendations, there is real potential of the user deleting their anti-virus and anti-spyware applications. These rogue programs can also deliver malcode directly to the user's machine."

Programs that were falsely identified as spyware by UnSpyPC include an anti-virus tool, a well known anti-spyware application, and a system management tool. SurfControl has added detection for UnSpyPC, which it identifies as malicious code, to its security products. We submitted a request for UnSpyPC to comment on SurfControl's criticism via its download site on Thursday. At the time of writing, we've received no response. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts
Bloke behind the cockup says not enough people are helping crucial crypto project
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Experian subsidiary faces MEGA-PROBE for 'selling consumer data to fraudster'
US attorneys general roll up sleeves, snap on gloves
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.