Trojan.FakeAlert - How to remove April 17, 2008 By 2-viruses authors Trojan.FakeAlert is one of a group of trojans, which promote rogue anti-spyware and other rogue programs, just like the Zlob trojan. Trojan.FakeAlert infects the system insidiously and changes the desktop background image into a message, which says the user is infected. This is done to intimidate the user so he would buy the fake "licensed version" of whichever rogue anti-spyware program is being promoted. Trojan.FakeAlert will also change some settings and will disallow you from changing the desktop. The existence of Trojan.FakeAlert means that you have been infected by a rogue anti-spyware program. Both the trojan and the rogue should be removed upon detection. Automatic Malware removal tools Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , Manual removal Processes: rpnqrdnm.exe runsrv32.exe tcpservice2.exe susp.exe users32.exe sumsw32.exe ~wa6psetup.exe isc_ui.exe mgmrwmrv.exe Dll: zserv.dll wstart.dll winflash.dll udpmod.dll runsrv32.dll questmod.dll pynix.dll jao.dll bridge.dll temlxopqrxg.dll temlxopqwsp.dll Files: rpnqrdnm.exe runsrv32.exe tcpservice2.exe susp.exe users32.exe zserv.dll wstart.dll winflash.dll udpmod.dll runsrv32.dll questmod.dll pynix.dll jao.dll bridge.dll yod.htm sumsw32.exe ~wa6psetup.exe Personal Security Center Monitor isc_ui.exe isc_cpl.cpl temlxopqrxg.dll temlxopqbmp.dll mgmrwmrv.exe temlxopqwsp.dll Registers: HKEY_CLASSES_ROOT\\clsid\\{60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b} 60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Control Panel\\Cpls\\System Security Center SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SharedTaskScheduler\\2016a466-91a2-43c6-97d8-2fd380f065ef SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellServiceObjectDelayLoad\\eitheror 2016a466-91a2-43c6-97d8-2fd380f065ef {238E8B73-4015-460E-BBB5-70A4CADD30AF} {566C6071-FBB6-490C-A333-E489DDE9424D} MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\USERINIT\\userinit Windows\\CurrentVersion\\Explorer\\Browser Helper Objects {952A0FBE-E225-450F-A518-E55805DAF6AC} Trojan.FakeAlert facts Type: Trojan Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , TOC 5 responses to “Trojan.FakeAlert” can you tell me if it is this trojan that is locking down a few of my files on the computer.i was manually deleting things from the computer the things i was suppose to delete and when i came across these files a registry keys they wouldn’t delete. Can you help me on these……Protect Storage System Provider S-1-5-21-829916203-998739-4098804462-1009 needed permisson for>>>> .3g2 it seems to like follow this word pad entery around my computer as if it is keeping an eye on it..could it be fake alert or the Zlob i have. all so i have another one in window files that is hard to delete but can’t seem to find it..if i do i will list it on here again. thanks after i sent the other one i found it… SchedLgU file under windows thanks again I have taken your advise and paid for spyware doctor and I still have the problem………… I use Malwarebytes’ Anti-Malware free version, it was able to detect to Trojan.Fake Alert Virus… I start the computer in safe mode, disabled the process packwinparse.exe and ran Malwarebytes Anti-Malware, it was able to find the process, quaratine it, and then I was able to permanently delete it from the quarantine. Trojan.FakeAlert is a family of parasites. Each of the anti-malware tools can remove some parasites from that family. Leave a ReplyYour email address will not be published. Required fields are marked *Comment * Name * Email * Website
can you tell me if it is this trojan that is locking down a few of my files on the computer.i was manually deleting things from the computer the things i was suppose to delete and when i came across these files a registry keys they wouldn’t delete. Can you help me on these……Protect Storage System Provider S-1-5-21-829916203-998739-4098804462-1009 needed permisson for>>>> .3g2 it seems to like follow this word pad entery around my computer as if it is keeping an eye on it..could it be fake alert or the Zlob i have. all so i have another one in window files that is hard to delete but can’t seem to find it..if i do i will list it on here again. thanks
I use Malwarebytes’ Anti-Malware free version, it was able to detect to Trojan.Fake Alert Virus… I start the computer in safe mode, disabled the process packwinparse.exe and ran Malwarebytes Anti-Malware, it was able to find the process, quaratine it, and then I was able to permanently delete it from the quarantine.
Trojan.FakeAlert is a family of parasites. Each of the anti-malware tools can remove some parasites from that family.