FakeAlert Trojan - PrivacyAnywhere Spyware Research Library


	Home / Research


	FakeAlert

Details of the FakeAlert are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	FakeAlert
Type:	Trojan
Risk:
Description:	Trojan.FakeAlert will hijack the desktop background with an image alerting the user that their computer system has been infected with spyware. It also changes some settings of windows which include:- disabling permissions for the user to change the background image and setting the active desktop to 'show web content'. It is usually installed in conjunction with a rogue anti-spyware application.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CLASSES_ROOT\Interface\{900FBC20-6AEE-4E05-ABA9-AC46E309C029}
HKEY_CLASSES_ROOT\office_pnl.office_panel
HKEY_CLASSES_ROOT\Svshostt.arty
HKEY_CLASSES_ROOT\TypeLib\{8B076501-1D1B-4B26-9492-FDB8EEE00D7F}
HKEY_CURRENT_USER\Software\Microsoft\Microsoft Alerter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ctpmon\ctpmon.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\sys32\alerter.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\pro\tool2.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SNInstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Windows Installer\winstall.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Windows update loader
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\banmanpro
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Personal Security Center Monitor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\tcpipmon\tcpipmon.exe
HKEY_CLASSES_ROOT\Interface\{3ED808D8-9119-4757-B7BE-40C463452F87}
HKEY_CLASSES_ROOT\Interface\{580EB069-9905-4A04-A20C-AD6598D8C0A3}
HKEY_CLASSES_ROOT\Sb6.StrangeBho
HKEY_CLASSES_ROOT\Sb6.StrangeBho.1
HKEY_CLASSES_ROOT\TypeLib\{55149956-1A81-44F8-A00A-F9CF7CA03329}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bal\sysmonms.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\StUnInst\UINST.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ipmon\ipmon.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{CEF2D273-7F43-4445-B9DF-FD095524C49F}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MSI Configuration Utility
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations\msiconf.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsft Windows Adapter
HKEY_CLASSES_ROOT\Interface\{1A86D7DC-D241-4136-AF64-C5D241A07651}
HKEY_CLASSES_ROOT\qiawpbjj.msdn_hlp
HKEY_CLASSES_ROOT\TypeLib\{7A3DC573-7005-4A24-BB29-8AA47294391E}
HKEY_CLASSES_ROOT\AppID\intelvideo.dll
HKEY_CLASSES_ROOT\IntelVideo.IntelVideoCodec
HKEY_CLASSES_ROOT\Interface\{8388594E-D5C0-4933-A977-867D32D8FF19}
HKEY_CLASSES_ROOT\TypeLib\{EAEDDCA3-3989-4FF4-A773-3AC188C70A16}
HKEY_CLASSES_ROOT\AppID\{04F7FAC5-F506-4F29-9094-9CB9144B192C}
HKEY_CLASSES_ROOT\AppID\xunleibho_now.dll
HKEY_CLASSES_ROOT\xunleiBHO_Now.XunLei
HKEY_CLASSES_ROOT\a3gpcodec.a3GP
HKEY_CLASSES_ROOT\AppID\{5D67E2E7-0C2B-4491-87C4-37F2AC6033D2}
HKEY_CLASSES_ROOT\AppID\{87B570FB-D2CF-4D3C-8E1B-E1E7018BBA95}
HKEY_CLASSES_ROOT\AppID\{D4FD35A3-101C-4FAA-A9CA-E8C9461C3CEF}
HKEY_CLASSES_ROOT\AppID\a3gpcodec.dll
HKEY_CLASSES_ROOT\AppID\dx50codec.dll
HKEY_CLASSES_ROOT\AppID\mp3avi.dll
HKEY_CLASSES_ROOT\dx50codec.RealMedia
HKEY_CLASSES_ROOT\mp3avi.MP3
HKEY_CLASSES_ROOT\AppID\{33A12BEB-3219-4CA8-99B4-733192704C62}
HKEY_CLASSES_ROOT\AppID\{48BF2BC0-2945-11D8-8CAC-00080FC65465}
HKEY_CLASSES_ROOT\AppID\ir9v0_qcx.dll
HKEY_CLASSES_ROOT\AppID\IntelVideoDivX.dll
HKEY_CLASSES_ROOT\IntelVideoDivX.IntelVideoCodec
HKEY_CLASSES_ROOT\IR9V0_QCX.IntelVideo
HKEY_CLASSES_ROOT\Interface\{BF8BABAC-FC7F-4EE4-9B07-DB71EEFD3AA8}
HKEY_CLASSES_ROOT\TypeLib\{729E3450-3271-4D92-8FB8-7004FE1B2CAE}
HKEY_CLASSES_ROOT\AppID\{2B659BB5-3E85-4BC6-BAFC-98FEDFF3AE99}
HKEY_CLASSES_ROOT\AppID\VideoMP3.dll
HKEY_CLASSES_ROOT\Interface\{64130BE8-2B67-4A65-9CA5-1CC6948C1471}
HKEY_CLASSES_ROOT\TypeLib\{4E54D728-1FA3-4125-B468-C8B43C123E65}
HKEY_CLASSES_ROOT\VideoMP3.MP3
HKEY_CLASSES_ROOT\AppID\{6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F}
HKEY_CLASSES_ROOT\AppID\{66D69CC1-5373-4730-AB8E-24D2AB7FF95F}
HKEY_CLASSES_ROOT\AppID\{741403DD-46A4-4D58-8FA7-427335C3BBF6}
HKEY_CLASSES_ROOT\AppID\{7E4C5F57-FF13-4006-A5F6-BE97D9CD6261}
HKEY_CLASSES_ROOT\AppID\{BD907325-42B2-4077-BA63-F636B627C998}
HKEY_CLASSES_ROOT\AppID\powervideo.dll
HKEY_CLASSES_ROOT\Interface\{F627A939-3F63-42E2-B77B-F733CB2439C9}
HKEY_CLASSES_ROOT\PowerVideo.Video
HKEY_CLASSES_ROOT\TypeLib\{FADC335E-6A47-47EF-97B8-704C72D1E725}
HKEY_CLASSES_ROOT\AppID\{09D72564-27E2-4F12-8AB6-03F83E4567DE}
HKEY_CLASSES_ROOT\AppID\{26B1DC31-2051-49DD-AEA6-368E702E5B63}
HKEY_CLASSES_ROOT\AppID\{7A23A1E8-B2AB-4C50-AD12-9E19B747E17C}
HKEY_CLASSES_ROOT\AppID\{F02B8C83-C817-4EA2-A499-29257DA0373A}
HKEY_CLASSES_ROOT\AppID\sysdivx.dll
HKEY_CLASSES_ROOT\Interface\{609F107D-88EE-4D19-B56F-6C21A3E9DC1F}
HKEY_CLASSES_ROOT\sysdivx.Video
HKEY_CLASSES_ROOT\TypeLib\{F94E2B67-3D7A-4F94-AF35-5BBEDAAD3AC4}
HKEY_CLASSES_ROOT\AppID\{36490B2D-77CC-4CC2-B6A6-8A16EC550DAB}
HKEY_CLASSES_ROOT\AppID\{02788C74-8A3E-455D-9820-59784297DF96}
HKEY_CLASSES_ROOT\AppID\{15FEB658-AACC-412E-BC13-D54CFD74A8F6}
HKEY_CLASSES_ROOT\AppID\{38329D14-1302-4CA7-BEE4-C954516C43B3}
HKEY_CLASSES_ROOT\AppID\{6430CCA7-032A-4EB0-BCFF-838998E73EF5}
HKEY_CLASSES_ROOT\AppID\{D0995F82-90C7-4C78-9B4C-C1700FB8B120}
HKEY_CLASSES_ROOT\AppID\stream32a.dll
HKEY_CLASSES_ROOT\AppID\windivx.dll
HKEY_CLASSES_ROOT\Interface\{18D23D68-9E03-4FF0-8035-C6184C8784EF}
HKEY_CLASSES_ROOT\Interface\{37FB07D0-16B8-4975-A848-1DB62FEE0048}
HKEY_CLASSES_ROOT\stream32a.Video
HKEY_CLASSES_ROOT\TypeLib\{60B18D81-366A-4156-83B9-CF310ED9A8B7}
HKEY_CLASSES_ROOT\TypeLib\{76BFB9CF-A8AB-4826-B2AB-02E04A202C73}
HKEY_CLASSES_ROOT\windivx.Video
HKEY_CLASSES_ROOT\AppID\{15EB9F40-D775-4463-B75B-8687B3C66BB7}
HKEY_CLASSES_ROOT\AppID\{6F6D1C90-7BEE-4A15-8DAB-9C37A643FD3A}
HKEY_CLASSES_ROOT\AppID\{80590BC5-F4BA-4AD1-B216-C19EE86E2A77}
HKEY_CLASSES_ROOT\AppID\{8883BBC2-E716-4C98-B12C-BB40B4A415ED}
HKEY_CLASSES_ROOT\AppID\{B3E45A9B-7756-46A2-AB14-90175CD374F9}
HKEY_CLASSES_ROOT\AppID\{D17CFF74-A19C-4C36-821A-E074E4F889CA}
HKEY_CLASSES_ROOT\AppID\{D54F0577-8770-4A63-B926-6A640ED57F06}
HKEY_CLASSES_ROOT\AppID\{E2278F85-4584-4BEE-928C-600B38C385C1}
HKEY_CLASSES_ROOT\AppID\{E780E148-0BAC-4654-81A4-8A649F4D4A90}
HKEY_CLASSES_ROOT\AppID\corpol.dll
HKEY_CLASSES_ROOT\AppID\mscfg32.dll
HKEY_CLASSES_ROOT\AppID\msvideo.dll
HKEY_CLASSES_ROOT\AppID\pdswin.dll
HKEY_CLASSES_ROOT\AppID\pmspl.dll
HKEY_CLASSES_ROOT\AppID\websrc32.dll
HKEY_CLASSES_ROOT\corpol.Video
HKEY_CLASSES_ROOT\Interface\{38583F22-1B12-4893-9D7A-BD3FA2A114C7}
HKEY_CLASSES_ROOT\Interface\{4DBC05D7-975F-4BD1-907B-46293D9EEDF7}
HKEY_CLASSES_ROOT\Interface\{E330678D-C3B1-4AC1-AD7B-2F9CAC58F889}
HKEY_CLASSES_ROOT\Interface\{FEC3BE4F-E5AB-4B3F-9813-5326FA073155}
HKEY_CLASSES_ROOT\mscfg32.Video
HKEY_CLASSES_ROOT\msvideo.Video
HKEY_CLASSES_ROOT\pdswin.Video
HKEY_CLASSES_ROOT\pmspl.Video
HKEY_CLASSES_ROOT\TypeLib\{9077685D-CD6D-4CE3-8AE0-3CC0DD81D1C9}
HKEY_CLASSES_ROOT\TypeLib\{A54D885F-EA30-42C3-867B-4AD6C6600659}
HKEY_CLASSES_ROOT\TypeLib\{D685B6DB-1ED0-4345-8A86-674A4F0198EE}
HKEY_CLASSES_ROOT\TypeLib\{E4A441DE-E415-4C43-A466-4993093FF411}
HKEY_CLASSES_ROOT\websrc32.Video

News for Jul 4, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up