cancel
Showing results for 
Search instead for 
Did you mean: 
okie
Level 7
Report Inappropriate Content
Message 31 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Im having the same problem, but mine says " windows 7 home security firewall alert"...I can't access the internet to download the fix software so I downloaded malwarebytes to another device then copied it to my computer, but when I try to run the setup nothing happens. The program won't work. I have tried a couple different sites to download it from on this thread and no luck. Can the virus be blocking the malware bytes stuff now too?

Please Help! Thanks!

Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 32 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Ok some these are trained to recognise Malwarebytes etc so

1.rename setup file to abc.exe

2. When you install it rename the default malwarebytes folder to abc and the mbam.exe file to Av.exe

This should get you past the issue.

Also download an run FakeAlert stinger

http://www.mcafee.com/us/downloads/free-tools/fake-alert-stinger.aspx

Let us know how you go

okie
Level 7
Report Inappropriate Content
Message 33 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Tried abc.exe and still didn't work

Highlighted
Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 34 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

The only thing I know of that is left is to mount the drive as a slave on anotehr PC and scan it from it. The abc way worked for me.

have you tried to restore back to before the issue appeared?

okie
Level 7
Report Inappropriate Content
Message 35 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Tony, I really appreciate you trying to help. It seems the virus has deleted or disabled system restore. It says rstrui.exe can not be found.

I am not real computer savvy so I'm not sure I know what u mean by mount the drive as a slave on another pc. This is the only pc we have. Is there anything else I can try before I give in and take the computer to the geek squad?

Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 36 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Mounting a disk as a slave means taking it out of your PC and attaching it to another as a read-only extension to that PC. Whatever nasty malware is on the drive doesn't get a chance to become active and defeat the anti-malware program or hide from it, so it's completely exposed and can be found and wiped. I've never tried it myself but it does work, so the experts say.

If you can't run malwarebytes even after it's been renamed that may be part of the infection problem or may be something else - a faulty download, perhaps.

Have you tried downloading McAfee's anti-FakeAV utility, the Stinger? You can get it from HERE. It is now the first thing we recommend, and if by chance something new comes along that it doesn't detect we try to grab an example of the program for analysis. Give the Stinger a try, and let us know how you get on.

Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 37 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

It is a problem having no spare PC and also it not allowing access . You can call Mcafee and they will clean your PC for you and I understand no charge if they do not succeed.

I think it might be same charge as geek squad maybe.

Last tries

McAfee Communities: Anti-Spyware, Malware & Hijacker Tools

Try any of these renaming them as well as see if they help. Getsusp might find something it does not clean it but tells mcafee what was found and Mcafee updates the dats.

Worth a go before u part with your bread.

Oh the hijackthis forums mentionedmight also be worth a go. they are free but some accept donations if they help u.

SamSwift
Level 12
Report Inappropriate Content
Message 38 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Hi everyone,

I am going to close and lock this thread now. If you are visiting this site and have a new infection of 'XP Home Security' please start by using our FakeAlert Stinger. If that doesn't resolve the issue please start a new thread in our Top Threats space and we'll do all we can to help.

Kind regards,

Sam

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

Ex_Brit wrote:

None of the anrtivirus applications on the market are any good for these things, you just have to be very careful where you surf and what you click on.

All is not lost and there is no need usually to go to allo the drastic step of formatting and reinstalling Windows.

As described above the steps should work.

I'll lay them out again here plus an additional tool.......

McAfee have a new tool to help fight malware & fake anti-malware pests which usually get past most antivirus applications.  It's called GetSusp.

You have to go to the GetSusp Group to get the latest version and apparently they are now having a lot of success especially with all these new and prolific fake anti-malware threats.

GetSusp

Membership is not required.  You can also find support for it in that group and provide feedback.  The actual download is available HERE.

Please read this McAfee article: Required Reading - Home User Assistance, Malware Troubleshooting

If you can isolate the malware that isn't being detected you can try submitting it to McAfee Laboratories.

****You could also try scanning using the FREE version of THIS tool.  Update it before running and let it remove anything it finds and reboot if it asks you to do so.

Ex_Brit wrote:

OK, good luck.  If no success let me know and we'll take it a step further.  The reason why regular antivirus protection is not much good against these things is that it would have to be geared at such a bhigh detection level that it would more or less stop everything else, even the legitimate stuff, and that would make life difficult to say the least.   That's why there are specialist tools for such occasions.

Wow, the statements I highlighted above really concern me.  I caught this virus last week while running McAfee Total Security and it prevented me from accessing the internet, even in safe mode, and therefore I was unable to download any of the recommended fixes.  I had to go to a second computer and make a boot cd (Hirens) just to be able to get control of things (a tip I found through a friend of a friend on an unrelated message board).  I don't know what I would have done if I had not had access to a second computer. 

I'm not trying to disparage Ex_Brit in any way, but do you speak for McAfee?  Is it McAfee's official position that they do not intend to even attempt to detect and remove this particular virus, and that their customers will just have to scour the internet for help and patches if they become infected?  If so, I must seriously question what exactly I am paying McAfee for. 

Really, none of the anti-virus apps are good at this?  Malwarebytes seems to be.  Avast seems to be.  Someone needs to very quickly convince me why I should I not switch to them.

on 5/17/11 6:50:53 AM CDT
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 40 of 73

Re: Fake Alert Trojan - XP Home Security (Unregistered Version Please Register) HELP

Jump to solution

As Moderators for McAfee we have to respect their wishes in what we post.   It is a sticking point between us and McAfee, however, as to why so many of this type of malware gets past regular antivirus applications, theirs in particular.

There is always a possibility that you can use the computer with an internet connection by booting into 'Safe Mode with Networking' and whilst some applications don't work in that mode VirusScan will do a 'right-click scan', plus Malwarebytes, which I have mentioned extensively in various threads, not only works fully but can even be updated in that mode.

GetSusp is a tool to identify and hopefully lead to stopping some of these things and we have to recommend it in most cases, McAfee rules I'm afraid, but Malwarebytes is also recommended and is a totally different kind of anti-malware weapon with an extremely high heuristic detection setting, hence it can catch many things that an antivirus misses.  Conversely it isn't much good at tackling the millions of viruses that antivirus applications such as VirusScan do detect already.

OK so Avast may catch this one and a few others, but with these fake anti-malware 'applications' it's an extremely hit-and-miss guess as to which brand gets what.  Best to Google the name of the infection and if you can find a tool on the BleepingComputer forums all the better, as they are the leading source of cures for this sort of thing.

As this board belongs to McAfee we have to follow their rules.   There are plenty of independant anti-malware forums out there who aren't tied to one brand of software or another.

I keep a locked document here on the subject which thus far hasn't been censored:  https://community.mcafee.com/docs/DOC-2168

.


Message was edited by: Ex_Brit on 17/05/11 8:51:51 EDT AM

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community