Home > Information Security Tips > Threats and security advisories > How to ensure the validity of Microsoft Windows updates
Security UK Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

THREATS AND SECURITY ADVISORIES

How to ensure the validity of Microsoft Windows updates


Michael Cobb, Contributor
08.05.2009
Rating: --- (out of 5)


Security UK Tips and Expert Advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


I paid for and downloaded Antivirus XP 2008 and AlphaWipe Tracks Cleaner 2008 from a link in my Windows Update icon, but now I'm concerned with whether they are Microsoft products. Are they legitimate? I am concerned with identity theft. How can I ensure that the products I receive via Windows Update are secure and valid?

Updates and applications installed using Windows Update will always be digitally signed by Microsoft. The signature allows you to verify where the code came from and if it has been tampered with since its publication.

Unfortunately, both the programs you have installed are a complete scam and have nothing to do with Microsoft. Both programs use scare tactics to try and intimidate you into buying them. AlphaWipe is a suspect history cleaner, creating fake alerts about problems with your PC's registry that don't actually exist. XP Antivirus 2008 uses similar tactics by generating its own fake system error messages, which pop up and try to coerce PC users into buying the program in order to remove them.

You say that you downloaded these programs from your Windows Update icon. If this is the case, then it sounds very much like other malware is resident on your PC, which has changed where the Update icon takes you. I've also read instances where people have been duped into installing these programs while trying to purchase genuine antivirus and antispyware. So, sadly, you are not alone. Malware often comes bundled with free software downloads. It can also install itself when you use file-sharing functions found in instant message programs or visit a malicious website.

You need to first safely remove both of these programs and any other malware on your PC. There are many trusted antivirus and antispyware programs you can use from vendors such as Symantec Corp., McAfee Inc., and Kaspersky Lab Inc. If you don't want to spend any money, AVG Technologies provides a very good free antivirus program. SpyBot - Search and Destroy, a spyware tool, can also be downloaded for free..

Download, install and run both of these programs to remove what will probably be a large number of malicious applications that have infected your PC. Once you have done this, I would go to SpywareRemove, an online spyware removal guide, and check that the files they list as being part of XP Antivirus have been deleted. The next step is to restart your PC and run both the antivirus and antispyware programs again to ensure that no unwanted programs have reappeared.

Once you have cleaned your PC, it is very important that you practice safer online habits to prevent being infected again. If you get an unexpected window popup on your PC, close it by clicking the cross in the top right corner. Often malicious popups will have what appears to be Yes and No buttons. No matter which button you click on, a download starts, installing a malicious program on your system.

Do you use a peer-to-peer (P2P) program or other applications with a shared network? When you use these applications, you put your system at risk by possibly and unknowingly downloading an infected file. I would also ensure your Web browser's security settings are not set too low. If you're using Internet Explorer, go to Tools then Internet Options. On the Security tab, you should have the Internet setting at least at Medium-high. Depending on the types of site you visit, I would even consider setting this to High.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.co.UK.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Secure Coding and Application Programming
Open source software security tops commercial apps, study finds
Improving software with the Building Security in Maturity Model (BSIMM)
How to prevent Adobe hacks from affecting your organisation
SANS Institute, MITRE release new top 25 dangerous coding errors list
Code complexity analysis: How to keep it simple
Active PDF attacks target Reader, Acrobat zero-day vulnerability
Software piracy group offers cash to whistleblowers
SQL injection detection tools and prevention strategies
Cross-site scripting explained: How to prevent attacks
H.D. Moore speaks about Metasploit Project deal, Release 3.3

Platform and OS Security Management
Microsoft issues advisory on new IE security vulnerability
Microsoft patches SMB flaws, Hyper-V problem in big update
Microsoft blue screen affecting few corporate PCs
Microsoft to fix 26 flaws in Windows, Office
Thin-client technologies surge thanks to easier security, says Deloitte
Microsoft issues critical security update, blocks IE 6 attacks
How to use Windows XP Mode in Windows 7
Microsoft to patch single Windows 2000 vulnerability
How to prevent memory dump attacks
Microsoft gives Internet Explorer a major security overhaul

Threats and security advisories
Preventing phishing attacks: Enterprise best practices
The value of booting from a VHD in Windows 7
What to do with network penetration test results
How to prevent memory dump attacks
How to prevent phishing attacks with social engineering tests
Cyberwarfare and the enterprise: Is the threat real?
How to avoid botnet attacks
How to defend against rogue DHCP server malware
Mac OS memory flaws pose challenges for enterprise endpoint protection
How to prevent a cross-site tracing vulnerability exploit

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Serious Organized Crime Agency  (SearchSecurityUK.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



UK Data Security Solutions: Data Privacy, Identity Theft, Data Loss
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2008 - 2010, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts