Avoid getting scammed by "McAfee - TROJAN_2022 And Other Viruses Detected" sites
Written by Tomas Meskauskas on
What is "McAfee - TROJAN_2022 And Other Viruses Detected"?
While inspecting sites that use rogue advertising networks, our researchers discovered the "McAfee - TROJAN_2022 And Other Viruses Detected" scam. This fake content states that the site visitor's device has multiple infections.
It must be emphasized that these claims are fake, and this scam is in no way associated with either the McAfee anti-virus or McAfee Corp.
"McAfee - TROJAN_2022 And Other Viruses Detected" scam overview
This scam consists of multiple pop-ups. The first one is presented as the McAfee anti-virus' interface. The second is disguised as a quick system scan, which swiftly finds infections on the device. Afterward, it displays a fake threat report claiming that the system is infected with "TROJAN_2022", spyware, and adware.
It elaborates that the spyware is designed to extract usernames/passwords and banking-related information. The scam classifies the nonexistent adware infection as one altering Internet search results by inserting fake and deceptive content into them. While the trojan will supposedly wipe the hard drives and cause permanent data loss.
As previously mentioned, the information provided by this scheme is fake, and it is not associated with McAfee. It is noteworthy that no website is capable of detecting threats on visitors' devices – hence, any that make such claims are scams.
At the time of research, "McAfee - TROJAN_2022 And Other Viruses Detected" redirected to McAfee's official website via an affiliate link. Scammers often collect illegitimate commissions by using deceptive tactics to promote genuine content.
However, scams of this kind are more commonly used to endorse untrustworthy and malicious software, e.g., adware, browser hijackers, fake anti-virus tools, PUAs, trojans, ransomware, and other malware.
There are no guarantees that "McAfee - TROJAN_2022 And Other Viruses Detected" will continue to redirect to McAfee's actual website. Instead, it might lead visitors to fake McAfee sites or other malicious pages. Therefore, we strongly advise downloading from official and verified sources directly.
In summary, scams like "McAfee - TROJAN_2022 And Other Viruses Detected" can cause system infections, severe privacy issues, financial losses, and identity theft.
Name | "McAfee - TROJAN_2022 And Other Viruses Detected" pop-up |
Threat Type | Phishing, Scam, Social Engineering, Fraud |
Fake Claim | Visitor's device is infected with trojan, spyware, and adware viruses. |
Disguise | McAfee |
Related Domains | batons[.]live |
Detection Names (batons[.]live) | Google Safebrowsing (Phishing), Full List Of Detections (VirusTotal) |
Serving IP Address (batons[.]live) | 159.223.153.123 |
Symptoms | Fake error messages, fake system warnings, pop-up errors, hoax computer scan. |
Distribution methods | Compromised websites, rogue online pop-up ads, potentially unwanted applications. |
Damage | Loss of sensitive private information, monetary loss, identity theft, possible malware infections. |
Malware Removal (Windows) | To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. |
Similar scam examples
We have analyzed thousands of online scams; "Your System Is Seriously Damaged", "McAfee - Your Card Payment Has Failed!", "Norton - Your Phone May Be Receiving Many Spam Texts", and "Surfshark - Your PC Is Infected With 5 Viruses!" are just some examples of ones similar to "McAfee - TROJAN_2022 And Other Viruses Detected".
The Internet is full of deceptive and malicious material. Countless scam models are used to gain and abuse users' trust. Keep in mind that regardless of what these scams offer, promise, or warn – their sole goal is to generate revenue at victims' expense.
How did I open a scam website?
Scam websites can be force-opened the moment a page that uses rogue advertising networks is accessed. Alternatively, rogue webpages can cause redirects to deceptive sites when hosted content is interacted with (e.g., clicking buttons, links, text input fields, ads, etc.).
Misspelling a website's URL can also result in a redirection chain landing on a scam page. Intrusive advertisements and spam browser notifications promote this deceptive content as well. Furthermore, adware can display adverts endorsing scams or force-open webpages running them.
How to avoid visiting scam websites?
We strongly advise against using websites that offer pirated content or other questionable services (e.g., Torrenting, illegal streaming/downloading, etc.), as these sites are typically monetized through rogue advertising networks. Additionally, it is important to pay attention to URLs and be careful when entering them.
To avoid receiving deceptive browser notifications – do not permit suspicious webpages to deliver them (i.e., do not click "Allow", "Allow Notifications", etc.). Instead, ignore or deny notification requests from such sites (i.e., press "Block", "Block Notifications", etc.).
Furthermore, download only from official/verified channels and approach installation with care (e.g., read terms, use "Custom/Advanced" settings to opt-out of bundled apps/extensions, etc.) – to prevent harmful software from infiltrating your device.
Another recommendation is to be cautious when browsing since fraudulent and malicious online content usually appears legitimate and harmless. For example, intrusive ads might look innocuous yet redirect to unreliable/questionable websites (e.g., scam-promoting, gambling, pornography, etc.).
If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.
Text presented in "McAfee - TROJAN_2022 And Other Viruses Detected" scam pop-up:
McAfee Total Protection
TROJAN_2022 and other viruses detected (5).
Scan results: 2022_TROJAN virus, password_SPY, AdSwitcher detected
- TROJAN found on this PC will most likely copy and delete all data from hard drives.
- Spyware will attempt to collect logins, passwords and banking details.
- Adware usually replaces search results with false and scammy websites.
It is highly recommended to use an antivirus immediately!
[PROCEED]
Unprotected PCs are 93% more vulnerable to suffer from malware.
The appearance of "McAfee - TROJAN_2022 And Other Viruses Detected" pop-up scam (GIF):
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.
Quick menu:
- What is "McAfee - TROJAN_2022 And Other Viruses Detected" pop-up?
- How to identify a pop-up scam?
- How do pop-up scams work?
- How to remove fake pop-ups?
- How to prevent fake pop-ups?
- What to do if you fell for a pop-up scam?
How to identify a pop-up scam?
Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.
While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.
Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:
- Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
- Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
- Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
- Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
- Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.
Example of a pop-up scam:
How do pop-up scams work?
Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.
Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.
How to remove fake pop-ups?
In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.
In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.
How to prevent fake pop-ups?
To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.
To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.
What to do if you fell for a pop-up scam?
This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.
- If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
- If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
- If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
- Help other Internet users: report Internet scams to Federal Trade Commission.
Frequently Asked Questions (FAQ)
What is a pop-up scam?
Pop-up scams are deceptive messages designed to trick users into performing certain actions. Victims can be lured into making monetary transactions, disclosing private information, downloading/installing software, purchasing products, subscribing to services, and so on.
What is the purpose of a pop-up scam?
The purpose of pop-up scams is to generate revenue for their designers. Scammers primarily profit through deceptively obtained funds, abuse or sale of sensitive information, content promotion, and malware proliferation.
Why do I encounter fake pop-ups?
Pop-up scams are promoted on deceptive websites. Users typically access these pages via redirects caused by misspelled URLs, sites using rogue advertising networks, spam browser notifications, intrusive advertisements, or installed adware.
Will Combo Cleaner protect me from pop-up scams?
Combo Cleaner is capable of scanning the websites you visit. Should you access a rogue, deceptive/scam, or malicious webpage – you will be warned immediately, and Combo Cleaner will block further access to it.
▼ Show Discussion