Spyware and Virus Removal – User beware of the false positive


Spyware or virus removal is easy huh? Fire up your favorite spyware or virus removal program. Update the program with the latest definitions. Remove the found threats.

COOL!

Later you shut down your computer. The next day you go to turn your computer back on, but wait…the PC does not boot.

NOT SO COOL!

What happened? More than likely your favorite spyware or virus removal tool reported a false positive. A false positive is also known as a false alert. In other words the company you trusted to help your computer has now unintentionally caused harm to your computer. The malware removal company made a mistake. Actually you made the mistake. Their false positive is now a costly mistake for you in time and perhaps money to try to get things working again. (Definition -Malware means any software that may do harm to your computer. Common terms such as virus, spyware, rootkit, key-logger, back-door or trojan are all considered malware).

Most of the time malware removal tools do a wonderful job and remove the bad files as intended. But do yourself a favor and do a web search on your favorite malware removal progam and add the words false positive and read. At some point all vendors have removed files they shouldn’t. Some files are easily restored. Others provide more of a challenge. Some may require complete erasure of the hard drive and reinstallation of the operating system and files. Of course you wouldn’t be scared because you keep excellent backups… right?

I am not all that critical of malware removal and protection products for reporting false positives. It stinks when it happens but life goes on. I am very appreciative of these companies products that are there to help keep computers safe from threats. These vendors are on our side. Although it won’t seem like it when a false positive is reported and acted upon.

So how do vendors make such a mistake? Well… thousands of new malware hit the internet each day. In the race to diagnose and find a cure for each infection mistakes can happen. When the vendor realizes the mistake (usually after many angry support calls), they then remove the false positive from their database and release the new updated database version to the public.

So what can you do? It is important to keep up with definition updates. Update your malware removal and protection program with the latest definitions each time you run the program. An out of date program may be ineffective against new threats. Equally important is to be aware these vendors may make a mistake. If you are unsure about a file it is flagging as malware please research that file on the internet before removing the flagged threat. Better safe than sorry, the cure could be worse than the disease.

I am often asked if malware removal and prevention vendors are creating viruses and spyware in a backroom somewhere and releasing them on the unsuspecting public to help their business. I do not believe vendors take part in malicious activity as a business practice. That is not to say all employees of malware removal and protection companies are honorable. It is possible there may be a bad apple in the barrel, but sooner or later they would be found out and removed. The reality is there are simply too many a-holes in the world that love to cause harm either for bragging rights or money. I am a fan of people that are expert hackers or malware creators that work with the system to help software become safer. Those types of people are few and far between. Mostly it is about the money. The bad guys won’t stop. They will keep producing malicious software at a rate of thousands per day. They are out to get you, your money if they can and control of your computer to use for various nefarious actions. If your computer is connected to the internet then you are connected to the good and the bad. The bad can find you even without action on your part.

To help protect your computer run ONLY ONE anti-virus program. If you install more than one anti-virus program your computer performance will suffer as the two anti-virus programs fight each other in the background for the same space. You may run multiple anti-spyware programs. Although more may not be better in regards to system performance. When choosing a malware removal and protection vendor please stay with a well known company with a proven track record. If you receive a random popup on your desktop stating that your system has thousands of infections and you need to purchase this software now to remove - please do not purchase that program – it is most likely malware itself.

Ultimately the responsibility is yours to keep your computer safe (and backed up). Think before you click.

  1. No comments yet.

You must be logged in to post a comment.