📜 ⬆️ ⬇️

Top 5 most stupid antiviruses. Notes bully

Disclaimer: all of the following “believe cannot be disbelieved.” Put a comma yourself.

On the nose on April 1, and many of you still use boring and outdated antiviruses. But if you wander through different soft-directories and search for something with the word antivirus, you can find some very interesting things.

5th place “Bull Antivirus” : download.cnet.com/Bull-Antivirus/3000-2239_4-76174162.html

This wonderful product is found on CNET Download.com. Opposite the price indicated “Free; $ 59 to buy ”, which, apparently, means the need in the near future to give him a measly 59 bucks. Namely - April 27, judging by the inscription "Valid up to 04.27.2015". The antivirus itself is in a zip archive, in a folder with the promising name “DEBUG”. Although the site says "Bull Antivirus", but the installed program has the name "Bull Security". To install it, you had to agree with the Microsoft license (!).
')
That same license
image

After studying this software, in addition to the ability to generate several hundred windows with error messages, it was found:

It's all alone she shat
image


- Mysterious socket (on the screen on the right). When activated, the icons which pops up many windows with error messages and several non-working windows with inscriptions.
- A certain "Cleaner".
- Some "Start Up".
- World time index.
- And most importantly - a temperature converter.

The main thing in antivirus
image

The first acquaintance with the program was more successful, although nothing worked in it and error messages crashed, it could be launched. But when I decided to install it again to make additional screenshots, after closing the window with an error message, the program itself began to close. What does this have to do with the antivirus and where the antivirus itself remains a mystery. Particularly pleased with the inscription in the translation, saying "Your computer is fully protected."

4th place "Element Anti-Virus" : download.cnet.com/Element-Anti-Virus/3000-2239_4-75326846.html

Many antiviruses happen to have false positives, which is difficult to surprise in our time. But Element Anti-Virus, which cost 40 dollars and 72 cents (which is the exact price!)), To which, by the way, a rather big article in the English-language Wikipedia is devoted, surpassed everyone - he declared an empty 2-byte file as a very dangerous malware.

Critical threats in the Windows folder
image


Threat on closer inspection
image

Compared to this, firing into the standard Microsoft C Runtime Library will seem like a childish prank.

3rd place “Amir-Antivirus” : amir-antivirus.en.softonic.com
This program has a very high rating in the softonic.com software catalog - 9.7 with 50 voters. Deciding to find out why users love her so much, he entrusted her with checking out his flash drive. And as it turned out - in vain. Without any warning, without any questions, directly during the scan, she began to delete file after file.

There were files and no
image

I frantically pressed cancel, but it was too late. Having destroyed several program files (in particular, having corrupted the portable version of SoftMaker FreeOffice), she also took pity on one of the files and sent it to the quarantine organized all on the same flash drive than completely deleted the deleted files, making it impossible to restore them even with the help of specialized utilities. By destructive action, this “product” almost caught up with some “disk encryptors”.

2nd place “Redtex AntiVirus” : download.cnet.com/RedTex-AntiVirus/3000-2239_4-75372831.html

I was not going to write about fake antiviruses, but this “product” is located on the well-known soft-directory download.cnet.com, from where it has been distributed with impunity since February 15, 2011. When I tried to install this wonderful program, I found that instead of installing an antivirus, the “Conduit” toolbar is being installed into the Internet Explorer browser, and the shortcut in the menu leads not to the program, but to the site from which the scan imitating scanning is visible. What, however, will be downloaded from it on day X, is known only to the author. Browser hijacker + fake backdoor shortcut = new anti-virus recipe? Bravo download.cnet.com.

At first glance, the label as a label:
image

However, the content is a link:
image

And here is our super antivirus:
image


1st place ...

And now imagine our winner.

1. He does not know how to treat infected machines.
2. He does not know how to remove threats.
3. He does not know how to fix the flaws in safety.
4. He does not know how to protect in real time.
5. He does not know how to perform a full or selective scan.
6. He cannot see that his bases almost 4 months old are no longer relevant.
7. He can not display the amount of memory if it is less than 1 GB
8. He does not even know that the word “established” is spelled with two “H”.

All that he knows how useful is to scan something (such a scan is usually called fast) using hopelessly outdated databases and make foolish warnings, for example, about changing the browser home page.

But:

1. He is a paid product loader.
2. It is a paid product ad.
3. He constantly opens his website with ads.
4. He constantly uploads news with ads.
5. He collects detailed information about you and automatically sends it to the developers.
6. It installs adware.
7. It, according to the license agreement, can send your files to developers.
8. He scares you with problems, most of which are not worth a damn.

Meet the winner - this is Kaspersky Security Scan antivirus.

Link: download.cnet.com/Kaspersky-Security-Scan/3000-2239_4-75733614.html

The program containing adware, and at the same time having the only purpose - to be a Trojan horse in an enemy camp of computers with antivirus competitors. As someone well said - "foolish advertising application."

Someone recently called the add-on to free software a bad word. Who would it be?
image


Changed browser homepage. Who could do this?
image


New and spelling and in the amount of computer memory.
image


They promised a lot .. Find all viruses .. Scan the entire computer, including all sectors of the hard disk. The latter is stated in the certificate of the program, which is forbidden to be copied under the threat of criminal prosecution.
image


But nothing was found. But the system was a bunch of long-known Trojans. Not active of course, but still ..
image


Whatever the test, how can you find something with such outdated databases?
image


ps The opinion of the author coincides only with the opinion of the author.
ps2 The author already has a psychiatrist's certificate.
ps3 Al-Qaida is already looking for the author, it is unlikely that you will be ahead of her.

Source: https://habr.com/ru/post/254565/


All Articles