Webroot has announced that it has detected a rogue antivirus application that appears the same as to Symantec's Norton Antivirus.
The rogue antivirus application is distributed through various online download sites and is advertised by the generic name of “AntiVirus Pro” (antiviruspro.exe or setup.exe).
“AntiVirus Pro” uses deceptive advertising including fake alert messages and websites that claim a users machine is infected. These websites then promote rogue antimalware applications as a cure for their infected systems and sell it via a variety of online payment sources. Webroot has a definition for this new threat, and will detect it if present on a user's machine.
Webroot recommends having a current version of an industry-leading antispyware, antivirus and firewall product and never downloading free product or purchase them from unknown Web sites and vendors to protect against these fake downloads.