Microsoft update removes imposter antivirus

It seems that Microsoft’s Malicious Software Removal Tool may actually work.  The most recent update removes software that poses as antivirus software but actually hijacks computers.

Arstechnica reports that this particular piece of malware has gone by several aliases, which include Micro Antivirus 2009, MS Antivirus, Spyware Preventer, Vista Antivirus 2008 and so on and so forth.  Its real name is Win32/FakeSecSen.

Reports from Microsoft indicate the software was removed from nearly one million computers.  In the grand scheme of things that’s a relatively low number given the approximately 90 percent market share of Windows.

The Malicious Software Removal Tool only removes either the highest security risk threats or threats that have a high infection rate.  Microsoft reports that the FackeSecSen installation file contains one executable, a couple DAT files, some shortcuts and in rare instances an uninstaller (in name only).  Knowing the nature of malware the uninstaller probably does nothing.

The company further notes,

Only 20 percent of these removals contain executables of FakeSecSen. This indicates either the other 80 percent had at one point been infected by FakeSecSen and the threat was then manually and partially removed, or the machines were cleaned by other AV products/tools, or FakeSecSen had failed to install, etc.

Nevertheless, the possibility exists that the Malicious Software Removal Tool days are numbered.  Microsoft is preparing to enter the territory of providing free antivirus software.  Among other things it may allow the company to track infection rates as well as removal statistics.  That would be interesting to see.

I have always seen the removal tool as a joke.  SpywareDoctor, Comodo Internet Security and AVG always and I do mean always found things that it would not have found.  But then again, even Microsofts own Windows Defender (formerly Giant Antispyware) cannot dream to compete with SpywareDoctor.

• Microsoft lies about Vista being the most secure Windows ever
• Microsoft Security Essentials rated best free antivirus software
• Microsoft urges Vista upgrade to fight malware
• Microsoft Security Essentials could be an essential antivirus tool
• Free Vista Sunday, prevent spyware infections with SpywareBlaster