Microsoft has updated its Malicious Software Removal Tool to detect a generic type of fake antivirus program known as “Win32/InternetAntivirus.”

Win32/InternetAntivirus is a rogue program that displays false and misleading alerts regarding malware, in order to convince users to purchase rogue security software. This program also displays a fake “Windows Security Center” message.

The rogue program also runs a password stealer called “TrojanSpy:Win32/Chadem,” which tries to steal FTP usernames and passwords that can be used to compromise servers for hosting malware.

Details : Microsoft & Technet Blogs.