This malware attempts to influence you into purchasing a piece of software program to eradicate adware it indicates it has found. It’s a kind of rogue promotion which totally screws up your system. One cannot use most computer programs or go on the world wide web and these warnings keep popping-up.
This applies to all Windows version: - (XP, Vista, Windows 7)
The best program to make use of is Malwarebytes’ Anti-malware application (make sure you update the program to the most recent version). Because this is mainly malware and not really a virus, it bypasses most antivirus software programs.
Run or Download and install Malwarebyte (use another PC if need be as the Malware disables the browser Internet Explorer, Chrome and Firefox)
1. After Download and Install of Malwarebyte
2. Click Scan
Never ever Click Clean system or Apply Action on the Fake Windows Security Essentials Alert window.
You will also notice that several attempts have to be made to close this Alert either by clicking the Close button (bottom right) or Close (X - top right). It just opens up again, so don’t worry. On Malwarebyte is running and finds it will clean it whether the app is running or not.
3. Select Perform full scan
4. Click Scan button
5. Select all the hard drives that become visible by ticking them. Except a CD is in the drive to scan it makes no sense selecting the CD/DVD drive. Keep in mind that the trojan may be discovered on a cd nevertheless can not be removed, it better to take off what one need from the cd and destroy it.
6. Click Scan button
Malwarebyte will now run a full scan of your computer. This can take minutes or hours based on the amount of hard drives on your system or the size of the hard drives on your PC. However be patient and let the software complete its work.
NB: Malwarebyte will report on how much infections ended up being found when the scan is finished.
7. Click Remove Selected button
These are the files linked with the Virus- FakeAlert. The chief file is typically Antispy.exe and these files are customarily located in the:
:UserUserNameAPPDAtaRoaming”Malware name” - File
C:UserUserNameAPPDAtaRoaming”Adware name” -Memory Process
C:UserUserNameAPPDAtaLocalTemp”8F……...” - File
HKEY_CURRENT_USERSOFTWAREMicrosoft……- Registry Value
All of these have to be deleted and in my experience, only MalwareByte removes all, the other computer programs leave one or the other and the Adware comes back.
8. When the removal had been performed click “Yes” to restart your system as prompted. This will ensure absolute elimination of the Trojan.
A log file will appear telling you of the work completed to remove the Malware infection and this is found in the logs folder for future reference. Find it by clicking on the Logs tab on Malwarebyte interface.