Trojan horse highjack

Has anyone had any problems with a trojan that highjacks microsofts personal
security? It automatically blocks all of the microsoft security pages and
blocks all updates. I cant find any links specifically but wondered if there
was a way to isolate or remove it. It also shuts down the removal
function...It shows up as "Personal Security"????

AKA Trojan W32/FakeAlert.

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/de...prid=7552&st=1

Also available via...

Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com



Harrisonmj67 wrote:
> Has anyone had any problems with a trojan that highjacks microsofts
> personal
> security? It automatically blocks all of the microsoft security pages and
> blocks all updates. I cant find any links specifically but wondered if
> there
> was a way to isolate or remove it. It also shuts down the removal
> function...It shows up as "Personal Security"????

http://www.bleepingcomputer.com/viru...sonal-security

"Harrisonmj67" wrote:

> Has anyone had any problems with a trojan that highjacks microsofts personal
> security? It automatically blocks all of the microsoft security pages and
> blocks all updates. I cant find any links specifically but wondered if there
> was a way to isolate or remove it. It also shuts down the removal
> function...It shows up as "Personal Security"????