The makers of this particular kind of malware are getting better at what they do. Just take a look at the screen shots below and you will find they do a good job on graphics making them look like legitimate programs.
I am dating this info based on when I found infected computers. These malware programs change names frequently, but they all try to make it sound like something that would protect your computer :)
Found in March, April and May 2009
Malware Defender 2009
This message below you could get from visiting a website that is trying to install this stuff on your computer. In this case it's a first step in attempt to infect your computer. At this point if you click yes or cancel, or even click X to close the window – the download will start.
In this situation - the safest way to quit internet explorer is to press Ctrl Alt Delete, choose Task Manager and under Applications tab: Click and End task on all instances of internet explorer.
If you see any of the below on your computer - it means your computer is already infected:
My recommendations: if you can backup your files and have all the programs on cds for reinstall – don’t waste your time cleaning, in most cases it will takes longer to clean computer from malware than completely wipe out the hard drive and reinstall everything.
Spyware Protect 2009
The malware redirects your browser to this page trying to get you to buy fake antispyware product. Notice the url address: looks like the end is microsoft.com - but it's fake !
These messages are designed to trick you into purchasing fake products
Fake scan started
Fake scan complete
Fake scan results