Trojan.FakeAlert help

crafty*kate

Hi, I don't normally post in this section but I hope someone can help.

Yesterday, I had a message come up on my screen that looked like it was Windows Security Centre. It said I had 9 infected files, listed them (I have written down all the names), and told me that to fix them I needed to visit a website and download something. I can't remember the name of the website (doh) but it was something like smart-securitychecker.com. NOT Microsoft.

So this all sounds a bit dodgy to me...so I run an Avast full scan and it doesn't find anything. Download Spybot S&D, still nothing. But, following the stickies at the top of the forum, I've just downloaded Malwarebytes and that HAS found something - Trojan.FakeAlert.

More Google...so, it looks like this FakeAlert is what caused the original message? Fine. I'll delete it. But if Avast and Spybot didn't pick up anything, how am I supposed to know if I have anything else lurking around? I haven't noticed anything odd in my computer performance at all.

Thanks for reading this far...it's so frustrating trying to deal with all this stuff! I used to live with an IT bod and he did anything techie - now I have to keep telling myself I AM better off without him even if it means I have to fix my own PC! :rotfl:

Kate x

closed

no one scanner finds everything, the fake alert may have just been a webpage, designed to look like a popup, if you didn't click on it, you probably aren't infected

Post the malwarebytes log - is the trojan file in your internet cache? post a hijackthis log

If you aren't getting any symptoms, it's probably clean, but you could run a hitman pro check if you want more confirmation.

crafty*kate

Thanks....here's the log.


Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org
Database version: 5359
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
20/12/2010 01:52:19
mbam-log-2010-12-20 (01-52-19).txt
Scan type: Quick scan
Objects scanned: 161103
Time elapsed: 4 minute(s), 35 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E524163-8D00-46F3-B239-1F42D48C8ED0} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)



Off to find out about hijack this and hitman pro....

Firetastic

Hi I had Trojan Fake Alert last year. I cleaned it with Malwarebytes Anti Malware. I was looking for a recipe and clicked on one of those fake scanner website pages. All I did was hit CTRL ALT and Delete and got out of there. Don't click anywhere on that webpage

After asking someone about it they recommended I download Malwarebytes and run a scan. Just as well I did. Just ran it untill no malicious items were detected. That was almost a year ago. It seems so easy to come across those malicious webites. I hate virus makers lol.