Threat Database Fake Error Messages "System Security Firewall" Alert

"System Security Firewall" Alert

By ZulaZuza in Fake Error Messages

"System Security Firewall" Alert is a fake warning message utilized by the rogue anti-spyware application System Security 2009 in order to trick people into purchasing this fake spyware remover. The "System Security Firewall" Alert pop-up reads as follows:

"System Security Firewall Alert. System Security Firewall has blocked a program from accessing the internet. Internet Explorer is infected with worm Lsas.Blaster.Keylogger. This worm is trying to send your credit card details using Internet Explorer to connect to remote host.

Name: Internet Explorer
Location: C:\Program Files\Internet Explorer\iexplore.exe
Company: Microsoft Corporation
Version: 7.00.6000.16762
Activate System Security: To ensure continuous protection of your PC, you should activate System Security on this computer. Do you want to activate System Security now?"

Following the onscreen prompts will cause the user to purchase this fake anti-spyware program, while ignoring them will cause the fake security notifications and pop-ups to continue.

File System Details

"System Security Firewall" Alert may create the following file(s):
# File Name Detections
1. %desktopdirectory%\ws\systemsecurity.exe
2. %desktopdirectory%\ws\languages\english.lng
3. %desktopdirectory%\ws\config.udb
4. %programs%\system security\system security.lnk
5. %desktopdirectory%\ws\languages\german.lng
6. %programs%\system security
7. %desktopdirectory%\system security.lnk
8. %desktopdirectory%\ws\languages\spanish.lng
9. %desktopdirectory%\ws\init.udb

Registry Details

"System Security Firewall" Alert may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run systemsecurity

Trending

Most Viewed

Loading...