Responding to Impersonators

Online Fraud

Rogue Anti-Spyware

Scam artists are cashing in on the heightened awareness of spyware by offering bogus, or "rogue" anti-spyware programs. Some of these rogue anti-spyware programs are associated with known distributors of spyware and have been known to install spyware themselves.

Other rogue anti-spyware programs use deceptive or scare tactics to drive up sales from confused computer users searching for protection from spyware. Each of these anti-spyware programs is known for their illicit installation methods, desktop hijacks or deceptive, aggressive advertising.

The Federal Trade Commission has filed actions against a number of bogus spyware removal vendors, such as Seismic Entertainment Productions, creators of Spy Wiper and Spy Deleter, and MaxTheater, creator of Spyware Assassin.

Top Three Worst Rogue Anti-Spyware Programs & Variants


  1. Antivirus Gold Family - variants include:
    • Adware Delete
    • SpyAxe
    • Antivirus Gold
    • SpywareStrike
  2. PS Guard Family - variants include:
    • Security Iguard
    • Winhound
    • PSGuard
  3. SpywareNO! Family - variants include:
    • SpyDemmolisher
    • SpySheriff
    • SpyTrooper
    • SpywareNO!

Find more information about these and other rogue anti-spyware programs here.

Characteristics of Rogue Anti-Spyware Applications

Webroot Spy Sweeper™ detects rogue anti-spyware programs that are installed silently on a user’s machine, usually when a Trojan horse prompts a fake alert like the one below.

anti-spyware programs

Rogue anti-spyware programs may be downloaded by Trojan horses or installed when the Fake Alert is clicked. Other characteristics of rogue anti-spyware programs include:

  • Product is advertised via pop-up ads
  • Program appears in a Desktop Hijack
  • Installation occurs without user knowledge or consent

Pop-up window

Pop-up window used by a rogue anti-spyware program to scare a user into installing the program.

Rogue Anti-Spyware Program Advertisement

In many cases a user’s desktop is hijacked to an advertisement for the rogue anti-spyware program.

How to Spot a Legitimate Anti-Spyware Program

There are several easy ways to differentiate between legitimate programs and rogue applications:

  • Trustworthy anti-spyware programs do not advertise in pop-up ads or on questionable Web sites, such as gambling or pornographic sites.
  • Any security application which appears on your machine that you did not knowingly download or install is questionable, and is likely an illegitimate program.
  • The scan results should tip you off as well – inspect these carefully. Rogue anti-spyware programs will report legitimate files and processes as spyware to scare you into thinking that you have several spies on your PC.
  • Enter the product’s name in your favorite search engine, if results such as “Remove product name” appear, it is probably a questionable application.

Rogue Anti-Spyware Variants

Read recent news about rogue anti-spyware applications here.