Fake Security Software Websites – Still Popular In 2011

**Executive summary:** The report describes a prevalent fake security software campaign that lures users with animated browser warnings to install fraudulent antivirus binaries; the installed downloader Trojan fetches additional malware and pressures victims to purchase license keys. The campaign is hosted on thousands of domains, evades some AV detection (21/42 detections in the provided VirusTotal result), and the author provides defensive guidance for users.