Spyware, viruses, & security forum: When is it safe to click on "install updates" pop-ups?

I just want to say you may hover over the update and read what it is about before you install it.

Hi John,

Your question is one which has to be answered by millions of computer users every single day. I think the answer is sort of simple, but not always easy.

First let's examine the different kinds of updates you may be notified about, and then we can address some of the do-s and don-ts regarding pop-ups.

1. If you use Microsoft Windows and you have automatic updates turned on, the only notification you should ever see is the Yellow Shield in your System Tray (The Lower Right Portion of Your Taskbar). Although the Updates are called "Automatic", they will only install if a) You click on Update Icon and instruct Windows to proceed with the update/s in question; or 2) You properly shut-down your computer after updates are downloaded (but not yet installed) on your computer. When this occurs, you will be notified when you shut down the computer that Windows is installing updates and will shut down when it's finished.

2. Anti-Virus/Anti-Malware Updates. THESE CAN BE VERY DANGEROUS!!! If you receive a notification that the Anti-Virus or Anti-Malware Program installed on your computer has an update to be installed, I generally recommend you take the following steps:

a. Write down the name of the Program that says it needs or has an update.
b. Properly Shut down your computer.
c. Restart your computer and open the program that said it needed to be updated.
d. Update the program from within the program being updated. For example, if the message said you needed to update AVG, open the AVG user console and check for updates there. This will avoid the possibility that the notification you received may have been a fake.

e. The reason you need to shut down your computer is this. In most instances, viruses, spyware, malware, etc. are activated or installed by clicking on them. The simplest way to avoid the problem is by shutting down your computer. DON'T CLICK ON ANY AREA OF THE NOTIFICATION!!!

3. Almost every program installed on your computer has a capability to either Automatically Update (you don't see it happening), or to update the program from within the program itself. Adobe Reader can be updated from the Help Pull Down Menu. With Adobe Flash or Java - if you are notified they need to be updated, just log on to the website (Adobe.com or Java.com) and download the latest version of Flash or Java. It only takes a couple of minutes and is much safer than following a possibly harmful pop-up.

4. Email. Never ever, ever follow a link from an email you've received to update a product. If there is an update available, you should be able to find it by using the programs internal update feature. If you can't find it, try the program's web site. You'd be surprised how many fake update notifications people receive through email. If you're looking at new products and you trust the site (always check the URL address), that's okay. If you're uncertain, Delete the email. If there truly is a problem, you'll find out soon enough. In most cases, they're just trying to sell you something new.

I hope this at least addresses the core of your question. Pop-ups are dangerous and unreliable for the very concerns you raised in your question. Most specifically they can be faked. So the short answer I give my customers is - Leave them Alone!!! Shut down. Start over. Use the Update features provided in your programs. You should also set the specific settings for how and when programs check for updates when that feature is available.

Best of Luck

Thanks for the tip and the 64 dollar question when I went to click off on a pop up it was a defying expierence, it wouldn't let me until I hit task manager to end it. Thanks again for the tip.

Thank You

My question is whether it's dafe to click on the microsoft pop up that tells me a virus was detected click here to fix. I have Microsoft Security Essentials as protection. I just turned the computer off the way you said, and turned it back on and the pop up did not reappear.

Thank you very much.
I found the answer extremely useful and informative too.

Janakie

Great question..
Many times, my customers, have called me to remove "virus" protection software that itself, IS a virus or malware of some sort. I call it "extortion-ware". By the time you've clicked, "fix your computer now", you've done the damage..
But the question is , how do you know?

Most of the software that offers updates is in fact safe, but the key is, software that you've authorized, or is part of the OS, is safe to update. It is a safe bet that a Pop-Up that warns you about your files, being corrupted, and asks you to pay for or install the "full version" of a "cleaning" software, is probably malware. Do NOT click on that button!
Also, a common trick these hucksters use, is to offer a "yes" or "no" button, and pressing either one will do damage.
When you are not sure, do NOT click anything, but "x" out of the pop up, if you can.
As well, if you don't have critical data open, you could shut your computer down immediately. At the time of restart, run spyware, and virus scanning software, at this point hoping that it hasn't already infected your system.

Any time an "update" seems urgent, it probably will be dangerous to click to continue, Unless, you are fully aware of the software in question, hence your own virus software.

Anyone that writes code knows that what the "X" in the upper right of the window does can be altered so clicking the "X" can kick off the malicious code the same as a yes or no button. The best bet is to kill the process although at this point I would suggest it may be too late.

It is important to note, that by the time such Pop-Ups have appeared, usually the damage has already been done.
I have found that the safest thing to do is shut down immediately, and then run malware scans at start-up. I wasn't clear in the first post and UNFORTUNATELY, revisions/edits can't be done, else I would have corrected my advice.

I should have been more specific when using the "x" remark.

The Original Question was specific to known software(s), that are already loaded, such as "flash" or "java" OS, etc..
"x"ing out of those is safe 99.99% of the time. They are rarely spoofed (to my knowledge)

I've personally never seen rogue software/malware spoof these software(s), as they (the crooks) are usually trying to extract money from the victim. To do that, they must convince the user that their computer is infected with a virus (such as the recent Rogue, Anti-Virus Pro 2010). New ones every year and they do make money for these crooks. The software "Cleans" the computer and 49 dollars later the unknowing user goes back to a computer that "works" again.

I suppose an argument could sadly be made in favor of paying the "ransom". I know a few who have. To have the likes Geek Squad come out, one could be out 1-2 or more hundred dollars, as opposed to the "ransom".

Fact is, for those computer users that are nervous about what to do, the costs will be there to get the problem solved, One way or another. Sadly, these rogue companies get some of that cash. And months, or a year later, that pop up comes back. I wonder how many folks have paid more than once for this "protection".

...he's speaking in tongues again!

It's not you.

I have just deleted that nonsense post because.... it was nonsense!

It may be that you were replying to the 'reply' to that post as I was deleting, but my delete deleted that reply automatically.

Well, it makes sense to me anyway,

Mark

I cannot improve on charleswsheets' reply. Excellent! I'll simply reiterate -- and summarize what I, perhaps overcautiously, do.

Whether it be a Windows update notification, an anti-virus one, or ones from Acrobat, Adobe, et al, I never, ever click the update link. I either open the program and check for updates or go to the program's website and download updates from there.

I suspect "my" way is not necessary -- but it gives me a double-layer of security that the update is legitimate.

Don't click the "X" to try to close the popup.. THere are malware tricks that use that to install their garbage as well as clicking anywhere else on the popup.. Either reboot ,as has been suggested before , or use the Control/Al5/Delete to open Task Manager and close the program the popup came from ( usually Internet Explorer ).. Open the program the update was supposedly for and check for updates within it ; or go directly to the program creators website. Most of the malware popups my friends have been caught on are phony anti-virus popup warnings; with any click on it or the red x actually installing the malware.
The safest way to deal with any suspicious "update" announcement is to close the progam it came up during , and go directly to the publishers site to chack for updates.

I agree charleswsheets reply is the one to follow, with ther additional warning not to try closing the popup with the red x as you would a normal porgram .

It seems Ctl>Alt>Del and then open the task manager is the safest way to shut down pop-ups. Never underestimate the ability of the malware to take over the GUI. This applies to XP,Vista,Win7,32bit/64bit and it doesn't matter if you are logged in as administrator or restricted user.

Google Carberp if you want to get scared witless!