Microsoft Security Essentials Alert Malware

Microsoft Security Essentials Alert Malware Description

Screenshot'Microsoft Security Essentials Alert Malware' is a fake warning message that should be ignored by users. The 'Microsoft Security Essentials Alert Malware' warning informs a victim that his/her system is infested with malware. Then the victim is given an option to fix the computer and remove the malware by clicking on a provided 'Scan Online' button. Once a victim clicks on this button a new window will open and display a list of programs that the victim can choose from to remove the malware. The list contains both legitimate and illegitimate security programs. However, the victim will only be able to execute the illegitimate programs such as Red Cross Antivirus, Peak Protection 2010 and Major Defense Kit.

Technical Information

File System Details

Microsoft Security Essentials Alert Malware creates the following file(s):
# File Name Detection Count
1 %UserProfile%\Application Data\tmp.exe N/A
2 %UserProfile%\Application Data\defender.exe N/A
3 %UserProfile%\Application Data\antispy.exe N/A
4 %UserProfile%\Local Settings\Temp\[random] N/A
5 %UserProfile%\Application Data\PAV\ N/A

Registry Details

Microsoft Security Essentials Alert Malware creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"

Related Posts

One Comment

  • Sue:

    Hello there! This is my first comment here so I just wanted to give a quick shout out and tell you I genuinely enjoy reading through your posts.

    Can you recommend any other blogs/websites/forums that go over the same subjects? Thank you so much!