The fake Microsoft Security Essentials Alert virus is a Trojan that is a false clone of the legitimate Microsoft Security Essentials antivirus program and it tells the user that your computer is infected with Unknown Win32/Trojan. This malicious software promotes many different fake antivirus softwares such as: Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit and AntiSpySafeguard. The fake Microsoft Security Essentials Alert will state that it was unable to remove Unknown Win32/Trojan threat and will prompt you to install one of those five rogue programs to remove the infection which actually doesn’t even exist on your computer. Actually, it will display a list with 35 different antivirus programs, 30 of which are legitimate antivirus programs, but it let you install only the rogue ones.
There are two other every annoying things about this malware: it blocks task manager, registry editor and other legitimate programs and it also displays fake security alerts to scare you into thinking that your computer is infected with spyware, adware, Trojans and other malware. Some of the fake security alerts read:
- The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.
- Warning! Database updated failed!
Database update failed!
Outdated viruses database are not effective can’t guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database
Manual remove of the fake MSE:
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”
%UserProfile%\\Application Data\\antispy.exe %UserProfile%\\Application Data\\hotfix.exe %UserProfile%\\Application Data\\tmp.exe %UserProfile%\\Local Settings\\Temp\\kjkkklklj.bat
To remove this virus Automatically, We Suggest the following removal tools: