Google Shows “Your computer appears to be infected” Message
Google today began warning Internet users, Google Search Results page, that their computers are infected with a malicious program that hijacks search results and tries to scare users into purchasing fake antivirus software.
If you are seeing the above “Your computer appears to be infected” message in a yellow warning box at the top of Google Search Results page, you should definitely scan your computer with a good anti-virus and anti-spyware.
Google has announced that it’ll show the above mentioned warning message to computers that are infected with a particular strain of malicious software, or malware. The warning message will also contains a link to a Google page which will help you fix the infection.
Here is what Google says:
The Internet brings remarkable benefits to society. Unfortunately, some people use it for harm and their own gain at the expense of others. We believe in the power of the web and information, and we work every day to detect potential abuse of our services and ward off attacks.
As we work to protect our users and their information, we sometimes discover unusual patterns of activity. Recently, we found some unusual search traffic while performing routine maintenance on one of our data centers. After collaborating with security engineers at several companies that were sending this modified traffic, we determined that the computers exhibiting this behavior were infected with a particular strain of malicious software, or “malware.” As a result of this discovery, today some people will see a prominent notification at the top of their Google web search results.
- The malware appears to have gotten onto users’ computers from one of roughly a hundred variants of fake antivirus, or “fake AV” software that has been in circulation for a while. We aren’t aware of a common name for the malware.
- We believe a couple million machines are affected by this malware.
- We’ve heard from a number of you that you’re thinking about the potential for an attacker to copy our notice and attempt to point users to a dangerous site instead. It’s a good security practice to be cautious about the links you click, so the spirit of those comments is spot-on. We thought about this, too, which is why the notice appears only at the top of our search results page. Falsifying the message on this page would require prior compromise of that computer, so the notice is not a risk to additional users.
- In the meantime, we’ve been able to successfully warn hundreds of thousands of users that their computer is infected. These are people who otherwise may never have known.