This new breed of rogue software displays fake alerts in the banner of Microsoft Security Essentials. It is similar to the legit Microsoft Antivirus program which leads the user to a webpage which has the list contains over 30 different genuine antivirus software’s and 5 Rogue tools such as Red Cross Antivirus, AntiSpy Safeguard, Major Defense Kit, Peak Protection 2010, Pest Detector.
When the end-user tries to installs any one of the five listed fake software, it appears to be scanning the computer but does its job in planting something inside the machine.
If you are infected by this Rogue tool, you may try the full scan from the genuine Microsoft Security Essentials or the updated Malwarebytes AntiMalware. Even after that it stays then Bleeping Computer has additional removal instructions.
It is better to download the Microsoft Security Essentials from the Authentic Microsoft website here instead of getting hit by these fake products.
Confused with the Title? Remove Fake Antivirus is a program to remove Rogue Antivirus which are Malware themselves. This portable Freeware weighs 187 KB only which comes with a simple interface runs quickly about 30 seconds. Though we have Security Essentials and Malwarebytes are working hard in removing Rogue software’s, this one specializes in removing Fake software’s like Antivirus Pro 2009, Antivirus 360 and lot more.
The User Reviews are not that much positive with this product as it removes the wireless network card drivers and restarting windows in a loop but one said it works good if the scan is through Safe mode.
Though the author of this software have to improve the tool to its best, in his website I found the Manual Removal Guide of nearly 40 Rogue Software’s to be a useful one. Have you tried this software or have any comments about this tool please use the comment section.
Download Link for Remove Fake Antivirus from Softpedia.
Though the virus name sounds Greek and Latin, it just finished Doctorate in modifying the Master Boot Record (MBR) and making the PC data inaccessible. Now its sounds not great Though.
It spreads in two ways, via compromised websites and through a self exec Zip archive. This type of threat overwrites the MBR of all the drives available with its own data of just 50KB. Also it deletes Boot.ini, NTdetect.com, NTLDR, Bootmgr and hiberfil.sys.
ESET, a global provider of security solutions spotted this worm Win32/Zimuse.A and B spreading in Slovakian region created to prank a small community of bikers. It spreads beyond its boundaries and slowly injected greatest number of computers in United States. The two above said A and B variants has little bit time difference in activating itself since infiltration. ESET warns that if correct removal method is not initialized the virus switches itself to destructive mode.
If you see any payload regarding this worm in any systems please do backup the data just in case to avoid potential data loss. ESET also provided a tool to kick out this worm.
Download the tool from ESET: Zimuse Removal Tool