{"id":18555,"date":"2021-07-23T11:34:57","date_gmt":"2021-07-23T15:34:57","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/fake-windows-11-installers\/18555\/"},"modified":"2021-07-26T15:06:27","modified_gmt":"2021-07-26T11:06:27","slug":"fake-windows-11-installers","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/fake-windows-11-installers\/18555\/","title":{"rendered":"How to download Windows 11 while avoiding malware"},"content":{"rendered":"<p>Microsoft hasn\u2019t yet released Windows 11, but the new operating system is already available for download and preview. Cybercriminals, of course, are exploiting that, slipping malware to users who think they\u2019re downloading Microsoft\u2019s new operating system.<\/p>\n<h2>Why download Windows 11 now?<\/h2>\n<p>Microsoft actually claimed Windows 10 would be the <a href=\"https:\/\/www.theverge.com\/2015\/5\/7\/8568473\/windows-10-last-version-of-windows\" target=\"_blank\" rel=\"noopener nofollow\">last release of Windows<\/a>, that the company would just issue updates from there on out. On June 24 this year, however, the company unveiled Windows 11. And even though under the hood it\u2019s basically Windows 10, Windows 11 is still the OS\u2019s biggest update in six years, with an impressive number of new features and interface modifications.<\/p>\n<p>Officially, Windows 11 will become available to the general public in 2021, but loads of people are trying it out early by installing a prerelease build. Some enthusiasts want to try the new system for its novelty; others, such as tech reporters, to inform users about the new features. As for software developers, they need the OS to perform compatibility testing with their own products and fix any issues before release day.<\/p>\n<p>Although Microsoft has made the process of downloading and installing Windows 11 from its official website fairly straightforward, many still visit other sources to download the software, which often contains unadvertised goodies from cybercriminals (and isn\u2019t necessarily Windows 11 at all).<\/p>\n<h2>How scammers fool Windows 11 downloaders<\/h2>\n<p>The most straightforward way cybercriminals deceive users is by slipping in something extra (or else).<\/p>\n<p>One example involves an executable file called <em>86307_windows 11 build 21996.1 x64 + activator.exe<\/em>. With a file size as large as 1.75GB, it certainly looks plausible. In fact, though, the bulk of that space consists of one DLL file that contains a lot of useless information.<\/p>\n<p><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2021\/07\/23193642\/fake-windows-11-installers-screen1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-18556\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2021\/07\/23193642\/fake-windows-11-installers-screen1.jpg\" alt=\"Opening the executable starts the installer, which looks like an ordinary Windows installation wizard\" width=\"495\" height=\"387\"><\/a><\/p>\n<p>Opening the executable starts the installer, which looks like an ordinary Windows installation wizard. Its main purpose is to download and run another, more interesting executable. The second executable is an installer as well, and it even comes with a license agreement (which few people read) calling it a \u201cdownload manager for 86307_windows 11 build 21996.1 x64 + activator\u201d and noting that it would also install some sponsored software. If you accept the agreement, a variety of malicious programs will be installed on your machine.<\/p>\n<p><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2021\/07\/23193650\/fake-windows-11-installers-screen2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-18558\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2021\/07\/23193650\/fake-windows-11-installers-screen2.jpg\" alt=\"The second executable is an installer as well, and it even comes with a license agreement (which few people read) calling it a \" width=\"1232\" height=\"807\"><\/a><\/p>\n<p>Kaspersky products have already defeated several hundred infection attempts that used similar Windows 11\u2013related schemes. A large portion of these threats consists of <a href=\"https:\/\/encyclopedia.kaspersky.com\/glossary\/downloader\/\" target=\"_blank\" rel=\"noopener\">downloaders<\/a>, whose task is to download and run other programs.<\/p>\n<p>Those other programs can be very wide-ranging \u2014 from relatively harmless <a href=\"https:\/\/encyclopedia.kaspersky.com\/knowledge\/adware\/\" target=\"_blank\" rel=\"noopener\">adware<\/a>, which our solutions classify as <em>not-a-virus<\/em>, to full-fledged Trojans, <a href=\"https:\/\/encyclopedia.kaspersky.com\/glossary\/spyware\/\" target=\"_blank\" rel=\"noopener\">password stealers<\/a>, exploits, and other nasty stuff.<\/p>\n<p><input type=\"hidden\" class=\"category_for_banner\" value=\"ksc-trial-generic\">Where and how to download Windows 11 safely<\/p>\n<p>Download Windows 11 from official sources only, as Microsoft advises. So far, Windows 11 is officially available only to participants in the Windows Insider program \u2014 that is, you have to <a href=\"https:\/\/insider.windows.com\/en-us\/\" target=\"_blank\" rel=\"noopener nofollow\">register<\/a>. You\u2019ll also need a device with Windows 10 already installed.<\/p>\n<p>To upgrade your Windows 10 computer to Windows 11, go to <em>Settings<\/em>, click <em>Update &amp; Security<\/em>, then select <em>Windows Insider Program<\/em> and activate <em>Dev Channel<\/em> to get the update.<\/p>\n<p>We don\u2019t recommend running the update on your main computer; prebuilds can be unstable.<\/p>\n<p>We also advise you to use a <a href=\"https:\/\/me-en.kaspersky.com\/premium?icid=me-en_bb2022-kdplacehd_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team___kprem___\" target=\"_blank\" rel=\"noopener\">reliable security solution<\/a>\u00a0and never disable it, so that cybercriminals cannot gain access to your computer through social engineering or vulnerabilities in the not-ready-for-primetime system.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Scammers are distributing malware and adware made to look like Windows 11.<\/p>\n","protected":false},"author":2628,"featured_media":18560,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[542,1422,695,113,2474],"class_list":{"0":"post-18555","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"tag-adware","9":"tag-not-a-virus","10":"tag-scam","11":"tag-windows","12":"tag-windows-11"},"hreflang":[{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/fake-windows-11-installers\/18555\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/fake-windows-11-installers\/23073\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/fake-windows-11-installers\/9269\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/fake-windows-11-installers\/25050\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/fake-windows-11-installers\/23061\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/fake-windows-11-installers\/22397\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/fake-windows-11-installers\/25693\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/fake-windows-11-installers\/25159\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/fake-windows-11-installers\/31083\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/fake-windows-11-installers\/9838\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/fake-windows-11-installers\/40718\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/fake-windows-11-installers\/17357\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/fake-windows-11-installers\/17819\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/fake-windows-11-installers\/15070\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/fake-windows-11-installers\/27090\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/fake-windows-11-installers\/27312\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/fake-windows-11-installers\/24118\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/fake-windows-11-installers\/29450\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/fake-windows-11-installers\/29242\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me-en.kaspersky.com\/blog\/tag\/windows\/","name":"windows"},"_links":{"self":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/18555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2628"}],"replies":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=18555"}],"version-history":[{"count":5,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/18555\/revisions"}],"predecessor-version":[{"id":18565,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/18555\/revisions\/18565"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/18560"}],"wp:attachment":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=18555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=18555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=18555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}