Fake anti-virus poses as free McAfee VirusScan

Fake anti-virus software (also known as scareware or rogue anti-virus) continues to be a big problem. Malicious hackers create programs that pretend to be legitimate anti-virus products, but are actually designed to frighten you into believing you have security problems with your computer (in the hope that you’ll pay up for a cure).

Overnight our spam traps intercepted a wave of malicious emails claiming to be a free 30 day trial of McAfee VirusScan (which is a legitimate product, of course).

Fake anti-virus posing as free copy of McAfee VirusScan

Subject: McAfee VirusScan Plus
Attachment: setup.zip
Message body:

Sign up to our free newsletter.
Security news, advice, and tips.

Download a FREE 30-day Trial of MCAfee VirusScan Plus and Be Automaticaly Entered to Win

Installation file attached

Sophos detects the attached file as Mal/FakeAV-EI. If you want to try McAfee VirusScan please go to McAfee’s website and download it from there – don’t trust unsolicited emails like this.

Check out this YouTube video, where Fraser Howard from our labs describes fake anti-virus software:

[youtube=http://www.youtube.com/watch?v=2DzBdhqB73I&hl=en_GB&fs=1&rel=0]

Don’t forget to keep your (real) anti-virus up to date, and your wits about you.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "The AI Fix" and "Smashing Security" podcasts. Follow him on Bluesky, Mastodon, and Threads, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.