How Can We Help?
Recently, there have been multiple complaints about pop-ups of a fake anti-virus program called “System Tool” which is in no way related to Avira products. It gets on your computer via exploits or malware in various ways. Therefore, please keep your Windows operating system always up to date and make sure to frequently run updates of your Avira client.
After the fake antivirus program has been executed, it takes about 5 minutes before a message pops up at the right side of the task bar.
Then, fake results of malware that supposedly infected your system will be displayed in the interface of the fake antivirus scanner.
On the left there is a sidebar with different menu options that can be selected, like “System Scan”, “Protection”, “Privacy”, “Update” and “Settings”.
Once the user has clicked on one of those buttons, a new window will pop up, telling the user that he needs to activate “System Tool” to be able to use this feature.
If the user selects the option to activate “System Tool”, there will be a new window requesting payment informations.
If the user selects the option “No, continue unprotected”, however, a window will pop up every 2 to 3 minutes or so with the information that the system is infected with malware.
Once the user has bought a license, the “System Tool” can be activated.
Without activation, another side-effect is that the fake antivirus program will change the background of your desktop.
If the “System Tool” is installed on your computer (and you haven’t purchased a license), all applications and windows will be closed. The user won’t be able to open several applications again like the registry or the internet explorer. Instead, a message will pop up informing about an infection about those applications and that the access has been denied by the “System Tool”.