Online scams have take a turn for the worse, for PC users that is.

According to Panda Security a new wave of malware known as "rogueware" programs are raising the bar when it comes to scams, by demanding ransoms from PC users to unlock their files. A program known as "Total Security 2009" is one of the biggest culprits, demanding a fee of $79.95 to unlock and release all PC files, the coders of this malicious program even take it a step further by giving users the options to upgrade to premium support for an additional $19.95.

This malware program locks all files and application files on your PC by designating them all "infected" and not allowing users to open or run anything unless the user follows instructions to purchase a license using the only application that works, Internet Explorer.

Here's a demonstration on how the fake antivirus (rogueware) program works:

These programs are in fact highly developed, and follow a typical design and configuration of a legitimate antivirus program, including updates, privacy settings, scan schedules, they also include several language choices.

The roqueware program presents a number of issues for the unsuspecting victims, first users are conned into paying just to use their own computers and the program isn't at all an antivirus so the systems are left wide open and vulnerable to further threats possibly even by the same program.

PCs that are unprotected and have an "always on" internet connection are at high risk. Do not open spam mail, and avoid visiting sites where pirated software is traded.

Fake antivirus programs have become one of the biggest money making scams online, as they have successfully been able to advertise under false pretences on reputable sites like the New York Times.

If your PC has a fake antivirus prorgram installed, you'll see persistent warning messages that say your system is infected, then you'll be advised to visit a particular site where you're directed to upgrade this supposedly trial version you're already running so that you can remove the spyware or malware on your PC.

Programs like "WinAntiSpyware", AntiVirus 2008 ( Now 2009 ), Antispyware Pro XP and Antivirus Lab 2009 are all suspected of triggering malware activity on PCs.

So how do you remove fake antivirus from your PC?

1. The steps for removing these malicious programs are going to be differ depending on which one has infected your PC. Let's assume that the malware that's infected your PC is alerting you with fake warnings, increased pop ups and hijacking your home page.

2. For the malware that prove to be difficult to remove manually, you may be better off with a professional tool like Panda Security or Kapersky Internet Security. Generally this is the easiest way to go about it.

3. Go to your Add/Remove Programs from the control panel, restart your PC in "Safe Mode". On most PCs you can trigger Safe Mode boot up by pressing the F8 key when you first see the BIOS window. Once in safe mode fire up your anti spyware tool and let it scan your system and remove the infected files, then boot your PC normally.

4. Should your antivirus and/or anti spyware programs fail to remove the malware, you'll need to roll up your sleeves and do it manually. First backup all your files.

5. Open up your Task Manager ( Ctrl, Alt, Del > select Task Manager) Select the Fake Antivirus program and click on "End Process" to kill it.

6. Open RegEdit (Start > Run type: regedit), browse to the HKEY_LOCAL_MACHINE\Software key and locate the related subkey folders that are related to the malware program. **Word of Caution** Please backup your registry before you delete or rename anything in it. You've been warned!

7. The malware program will have a number of files that will need to be deleted manually from C:\Windows, but you may need to also stop any processes that are using these files. Again backup your important file before you go deleting away.

Most genuine antivirus programs are not yet able to detect these roqueware programs, which is another reason they have been so successful. If you have not protected your system against this type of threat, please visit Panda Security to do so now.