Fake system dialogs for Windows

Please familiarize yourself with these examples of advertisements or trojan horses which imitate system dialog boxes. Click on any image for a larger view (and no malware or other unexpected suprises).

What distinguishes a real system message from a fake?

  1. No cancel or help buttons.
  2. Incomplete window features.
  3. Poor spelling or grammar.
  4. It appears as a link with an unrecognizable or unfamiliar target address

Feel free to suggest additions or changes to this page by emailing me.

Email-delivered trojan horse masquerading as email from Microsoft

This email message (viewed here in Outlook Express) looks like a Microsoft-issued email message about a security update. But it contains a trojan horse which installs a worm.

Tipoffs: poor use of capitalization; lack of customization in address; email likely not requested or solicited by you.

Action: delete the message immediately.

Alternatives: See our page on system updates for more discussion of safe updating practices.

Fake update email message from Microsoft.

Inline ad which appears as window

These advertisements appear on web pages. They have the colors and border of a standard Windows XP or Windows 95 window. Their use of these colors and designs gives them a legitimate appearance which is undeserved. The first ad links to an online survey which collects personal information (including one's email address); the second installs software which displays advertising (adware).

Tipoffs: Window lacks "help" (?) and "close" (X) boxes in upper right; "click here" instead of "OK" or other functions; entire "window" is a link.
Action: Ignore these advertisements.

Alternatives: the National Weather Service (which supplies all the information used by WeatherBug).

Inline ad masquerading as window

Popup ad for WeatherBug malware

Popup ads which appear to be system alerts

These ads masquerade as Windows dialogue boxes and offer useful services. However, they install software which delivers advertising on a regular basis, and collects information about your browsing habits, compromising your privacy and wasting your computer's resources. (This software is commonly called "adware.")

Ironically, the "System Soap" advertisement, which mimics the "blue screen of death" that appears when Windows crashes, promises to clean up your system and protect your privacy. It does the opposite.

Tipoffs: In both windows, "Microsoft Internet Explorer" in title bar shows that this is a web pop-up. One ad admits its true nature with "advertisement" in the upper right; in the other, the entire window is a link (not just the "OK" button).

Action: Close by clicking the "X" box in the upper right.

Alternatives: the National Institute of Standards & Technology time service; security and privacy products from Symantec or other vendors.

System clock fake update

BSOD-oriented fake update