{"id":407794,"date":"2021-07-28T11:01:44","date_gmt":"2021-07-28T09:01:44","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=407794"},"modified":"2021-07-28T11:04:06","modified_gmt":"2021-07-28T09:04:06","slug":"beware-fake-windows-11-installs-packed-with-malware","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/software\/407794-beware-fake-windows-11-installs-packed-with-malware.html","title":{"rendered":"Beware fake Windows 11 installs packed with malware"},"content":{"rendered":"<p>PC users looking to try out Windows 11 early should stay well clear of unofficial downloads of the preview OS.<\/p>\n<p><a href=\"https:\/\/www.kaspersky.com\/blog\/fake-windows-11-installers\/40718\/\" target=\"_blank\" rel=\"noopener\"><strong>Security research firm Kaspersky has discovered<\/strong><\/a> that many of its users were downloading versions of the Windows 11 preview build from sources other than Microsoft&#8217;s official website.<\/p>\n<p>Kaspersky said that these downloads were often loaded with malware that attempted to infect computers on which they were installed.<\/p>\n<p>&#8220;A large portion of these threats consists of downloaders, whose task is to download and run other programs,&#8221; Kaspersky said.<\/p>\n<p>&#8220;Those other programs can be very wide-ranging \u2014 from relatively harmless adware, which our solutions classify as\u00a0not-a-virus, to full-fledged Trojans,\u00a0password stealers, exploits, and other nasty stuff.&#8221;<\/p>\n<p>Kaspersky said its products have already defeated several hundred infection attempts from these downloaders.<\/p>\n<p>One example involves an executable file called &#8220;86307_windows 11 build 21996.1 x64 + activator.exe&#8221;.<\/p>\n<p>Kaspersky said the 1.75GB size of the file makes it appear like a legitimate downloader, but the bulk of that space consists of one DLL file that contains a lot of useless information.<\/p>\n<p>Opening this executable will start the installer, which looks like an ordinary Windows installation wizard.<\/p>\n<p>However, its main purpose is to download and run another executable.<\/p>\n<p>&#8220;The second executable is an installer as well, and it even comes with a license agreement (which few people read) calling it a &#8216;download manager for 86307_windows 11 build 21996.1 x64 + activator&#8217; and noting that it would also install some sponsored software.&#8221;<\/p>\n<p>&#8220;If you accept the agreement, a variety of malicious programs will be installed on your machine.&#8221;<\/p>\n<div id=\"attachment_407814\" style=\"width: 810px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-407814\" class=\"wp-image-407814 size-full\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2021\/07\/Windows-11-fake-install_2.jpg\" alt=\"Screenshot of Fake Windows 11 installer at work\" width=\"800\" height=\"533\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2021\/07\/Windows-11-fake-install_2.jpg 800w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2021\/07\/Windows-11-fake-install_2-600x400.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2021\/07\/Windows-11-fake-install_2-640x426.jpg 640w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2021\/07\/Windows-11-fake-install_2-768x512.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><p id=\"caption-attachment-407814\" class=\"wp-caption-text\">Fake Windows 11 installer, via <a href=\"https:\/\/www.kaspersky.com\/blog\/fake-windows-11-installers\/40718\/\" target=\"_blank\" rel=\"noopener\">Kaspersky<\/a><\/p><\/div>\n<p>Kaspersky recommended that those who are keen on upgrading to Windows 11 use the official channel for doing so.<\/p>\n<p>To download the current <strong><a href=\"https:\/\/mybroadband.co.za\/news\/software\/404151-windows-11-hands-on-tested.html\">preview version of Windows 11<\/a><\/strong>, you need to be running Windows 10 and must sign up to the Windows Insider Programme.<\/p>\n<p>To do this, open Settings, select &#8220;Update &amp; Security&#8221;, and choose &#8220;<strong><a href=\"https:\/\/mybroadband.co.za\/news\/software\/403947-windows-11-preview-now-available-how-to-download-it.html\">Windows Insider Program<\/a><\/strong>&#8220;.<\/p>\n<p>You will have to opt for the Dev Channel to receive the latest available updates as quickly as possible.<\/p>\n<p>It should be noted that preview versions under this channel are early builds that can be unstable. This means that you could be at risk of data loss, performance problems, or security flaws.<\/p>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/smartphones\/407610-microsofts-surface-duo-2-images-leaked.html\" rel=\"bookmark\">Microsoft\u2019s Surface Duo 2 images leaked<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Security research firm Kaspersky has warned PC users to stay away from fake Windows 11 installers that are being packed with malware. <\/p>\n","protected":false},"author":341042,"featured_media":403349,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[16],"tags":[1595,801,123,71144,3338,70233],"class_list":["post-407794","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","tag-kaspersky","tag-malware","tag-microsoft","tag-trojans","tag-virus","tag-windows-11"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/407794"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341042"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=407794"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/407794\/revisions"}],"predecessor-version":[{"id":407854,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/407794\/revisions\/407854"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/403349"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=407794"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=407794"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=407794"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}