From Pine View Farm

Yeah. Right. 2

I was looking for a defunct website at the Internet Archive and stumbled across a place that had squatted on the name of the site.

That page redirected to one of those fraudulent sites that pretends to scan your computer for malware so it can trick you into buying their anti-malware product. Most of the time, their product is actually more malware.

I clicked “Cancel” scan and it pretended to scan anyway while popups cascaded. One give away was that the phony scan’s progess bar moved faster than a scan from a local disk would have allowed, let alone a scan over the net (and I have used internet AV scans from reputable vendors such as Trend Micro and Symantec. It then told me that I had oodles of trojans, viruses, and other assorted baddies on my C:\ and D:\ drives.

This box runs Ubuntu Linux with Fluxbox. I don’t have C:\ and D:\ drives; I have sda1* (a very small boot drive) and sda3* (everything else). I don’t have a “My Documents” folder.

Here’s what it claimed to see:

False Virus Results

Here’s what’s actually there:

False Virus Results


*sda1 means “SCSI (or SATA) Disk A, Partition One.” sda3 means “SCSI (or SATA) Disk A, Partition Three.” There is no sda2. You’ll have to ask Ubuntu about that.



  1. Karen

    August 27, 2009 at 1:26 pm

    I think I’ve seen something like that in action. Thankfully, not on mine. Defender & 360 took care of it.

  2. Frank

    August 27, 2009 at 4:50 pm

    The take-away is this:  The scan is fraudulent.  It’s not a scan.  It’s a movie.