How do i Remove The fake Microsoft Security Essentials Alert? Maleware / spyware

Re-Share This Post:

The fake Microsoft Security Essentials Alert is a Trojan virus that impersonate the genuine Microsoft Security Essentials antivirus program and keep you showing that your computer is infected with unidentified Win32/Trojan  (for information and guidelines, genuine Microsoft Security Essentials can be start here). This malicious software advertise five different bogus anti-virus programs:

1. Red Cross Antivirus
2. Anti Spy Safe guard
3. Pest Detector 4.1
4. Peak Protection 2010
5. Major Defense Kit

---

The Major purpose of this fake Trojan is to purchase illegitimate software.  This Fake Trojan will present a listing with 35 different antivirus programs 30 of which are genuine antivirus programs, but it permit you install only the fake ones. The false Microsoft Security Essentials Alert will show that it was not possible to remove Unknown Win32/Trojan threat and here after it will keep promoting those fake antivirus which is identified in the post, install any one of the fake program (Red Cross Antivirus, Anti Spy Safe guard, Pest Detector , Peak Protection 2010, Major Defense Kit ) to get cleaned.
If you install any one of these illegitimate program, it will prompt you to restart your computer. After the start process completion, once again your system will be scanned for the malware after the scan fake scan process will complete it will show that all found infections only can be cleaned / removed with a full version/ licensed copy of that software.

Whatever the alert is presenting to you is bogus. You can safely ignore them. And, of course, don't purchase any of those fake programs. it is clear on how to avoid being infected with Fake Microsoft Security Essentials Alert. If it happens to overtake your computer, use only valid anti-malware application for automatic removal.  The bogus Microsoft Security Essentials Alert and related rascal programs should be removed from the computer as soon as possible.

There are two other every frustrating things about this malware:

1. The Task Manager will be blocked so that you will be not able to end process of this fake software and after that it will show these kinds of alerts
2. It displays bogus security alerts to scare you into thinking that your computer is infected with spyware, adware, Trojans and other malware.

“The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.

“This happened because the application was infected by a malicious program which might pose a threat for the OS.

“It is highly recommended to install the necessary heuristic module and perform a full scan of your system to exterminate malicious programs from it.”

Some Fake Alerts Can Be Found Down Here

Microsoft Security Essentials Alert

Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until your action. Click ‘Show Details’ to learn more

Warning! Database updated failed!

Database update failed!
Outdated viruses database are not effective can't guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!

nasty Files Added by the malware:

%UserProfile%\Local Settings\Temp\[random].bat

%UserProfile%\Application Data\PAV\

%UserProfile%\Application Data\antispy.exe

%UserProfile%\Application Data\defender.exe

%UserProfile%\Application Data\tmp.exe

Fake Microsoft Security Essentials Alert Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “tmp”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “SelfdelNT”

HKEY_CURRENT_USER\Software\PAV

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”

Firstly we need to remove these programs which are operating this fake Microsoft Essentials; it can only be done if the task manager and registry is restored

• Learn to see how to restore the Task Manager Manually
• Learn to see how to fix the registroy editor manually
• Free task manager restoring programs
• Free Utility to restore registry editor

Alternatively we can use Hijack by Trend Micro to kill the process (Click here to Download)

• hotfix.exe
• antispy.exe
• tmp.exe

After killing the processes we have to delete these registry entries

Delete registry values:

• HKEY_CURRENT_USER\Software\PAV
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"

Learn how to Remove registry Enteries Safely

After the successfully and safely deleting the registry entries what next step we have to adopt is to delete the following files

• %UserProfile%\\Application Data\\antispy.exe
• %UserProfile%\\Application Data\\hotfix.exe
• %UserProfile%\\Application Data\\tmp.exe
• %UserProfile%\\Local Settings\\Temp\\kjkkklklj.bat

Reboot your computer and you are done.