Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Microsoft > Security

August 23rd, 2010, 16:29 GMT · By

Microsoft Security Essentials Alert Is Not Microsoft Security Essentials 1.0 or 2.0

SHARE:

Adjust text size:


Microsoft Security Essentials
Enlarge picture
Users need to steer clear of Microsoft Security Essentials Alert. Simply because Microsoft Security Essentials Alert has nothing to do with either Microsoft Security Essentials 1.0 or MSE 2.0, which is currently in Beta testing phase.

Instead Microsoft Security Essentials Alert is a rogue antivirus. This is of course not the first time when attackers are copying Microsoft’s genuine free version of its security solution for Windows.

Some Softpedia readers might still remember that Security Essentials 2010 was another fake antivirus that was attempting to piggy back ride Microsoft Security Essentials.

However, with Microsoft Security Essentials Alert have taken it one step further, by replicating the legitimate Microsoft Security Essentials details.

Attackers are simply attempting to give their fake antivirus a feeling of authenticity. The best way for them to fool victims into thinking that their rogue AV is a legitimate product is to replicate as closely as possible the look and feel of the genuine security solution, in this case Microsoft Security Essentials.

Microsoft Security Essentials Alert features not only a similar brand to Microsoft’s free antivirus, but also elements of the UI (user interface) and even style elements such as the icon.

But whereas Microsoft Security Essentials 1.0 is an actual security solution, Microsoft Security Essentials Alert is not.

In fact, Microsoft Security Essentials Alert actually infects computers, and attempts to scare customers into thinking that their computers are infected with an Unknown Win32/Trojan. (via BleepingComputer)

The scareware is designed to trick users into paying money for one of five rogue AV programs, including Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit and AntiSpySafeguard or AntiSpy Safeguard.

The social engineering trick is to make victims believe that their machines have been compromised and that the fake AV offered is the only one capable of removing the threat.

In reality there is no threat. And Microsoft Security Essentials Alert is not only completely useless but also malicious. Although it masquerades as the legitimate MSE, Microsoft Security Essentials Alert doesn’t feature any real AV capabilities, and is incapable of removing actual threats, let alone the inexistent malware that it is actually reporting.

At the same, Microsoft Security Essentials Alert will terminate a range of programs such as Internet Explorer claiming that they are infected, and will flood users with fake security warnings.

Here are some examples:

“The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.

“This happened because the application was infected by a malicious program which might pose a threat for the OS.

“It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.”

Or, “Warning! Database updated failed! Database update failed!

“Outdated viruses database are not effective can't guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!

And “Warning! Running trial version!

“The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!”

None of these warning are valid. Users need to ignore them completely, and not pay a single cent for whatever fake AV Microsoft Security Essentials Alert is offering.

Remember, the legitimate Microsoft Security Essentials is completely free of charge for customers running genuine Windows copies.

The Redmond company will not as Windows users any money for Microsoft Security Essentials 1.0 or for Microsoft Security Essentials 2.0 (currently in Beta).

Microsoft Security Essentials is available for download here.

Remove Fake Microsoft Security Essentials Alert / ThinkPoint

TELL US WHAT YOU THINK:

29,274 hits · 13 comments · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Microsoft Security Essentials vs. Kaspersky, Avast, BitDefender, Avira, Symantec, McAfee, AVG, Panda

Microsoft Security Essentials 2.0 Beta Downloads Still Live, MSE 1.0 AV-Test.org Certified

Microsoft Security Essentials 1.0 Earns High Scores from AV Testing Firm

Microsoft Security Essentials Antimalware Engine Update Postponed

Free Microsoft Security Essentials Receives VB100 Certification

READER COMMENTS:


Comment #1 by: bob on 24 Aug 2010, 06:23 UTC reply to this comment

wow, that sucks...
you screwed up on the hyperlink... btw

Comment #1.1 by: Marius Oiaga on 24 Aug 2010, 07:06 GMT

Thank you!


Comment #2 by: bigal on 24 Aug 2010, 15:12 UTC reply to this comment

Do you know how to get rd of it? I ran malware bytes and M/S Security suite, but didn't find it. Thanks


Comment #3 by: NMMT on 25 Aug 2010, 12:47 UTC reply to this comment

This 'alert' won't let me get on the web or back date the computer. So how do we get rid of it? Great article, but no solutions offered.


Comment #4 by: Lance on 26 Aug 2010, 03:26 UTC reply to this comment

Hi, sorry to hear that many of you also fell for this trick (2AM was my excuse...). This malware blocks execution of programs that may remove it (browsers, taskmam, etc.) and Office (mainly to annoy and worry). I found I could get these programs to launch if I left the fake warning window open while trying again to start the program. I guess the trojan is tied up waiting for your response.
Also, I was able to stop the fake antivirus software that subsequently gets sold to an unwitting user by stopping the "spyapp" service, of all things.

Comment #4.1 by: Mr Pilot on 31 Aug 2010, 18:28 GMT

I have the trojan too .. How do I get rid of it?


Comment #5 by: Mad in Vermont on 01 Sep 2010, 01:17 UTC reply to this comment

soooo....how do we get rid of it? It has hijacked my computer unless I start up in SafeMode. When I try to do anything, the screen turns completely black and hangs indefinitely. Nice article but could you please offer a solution?

Comment #5.1 by: meggan on 03 Sep 2010, 20:53 GMT

I second the request for a legit solution for getting my computer up and running in regular mode....

Comment #5.2 by: cliffsteele on 04 Sep 2010, 13:18 GMT

I had trouble with this too, tried tons of stuff. This solution finally worked for me:
http://www.2-spyware.com/remove-the-fake-microsoft-security-essentials-alert.html

I couldn't open task manager so to kill a process I had to do it in hijack this. Once I killed antispy.exe everything worked again and I could go in and delete the registry items.


Comment #6 by: lololololol on 06 Oct 2010, 02:16 UTC reply to this comment

restart your computer the press ctrl alt and delete is it doesn't work restart till you can get the task manger the end that task and end progresses(avsuite.exe
avsoft.exe


Comment #7 by: joelc on 01 Nov 2010, 04:26 UTC reply to this comment

I got hit twice by this damned trojan. I could easily put a bullet in the head of the person who wrote it. System Restore is the only effective way of dealing with it. Also, stay away from MSE. It sucks since it couldn't detect the trojan. Try Comodo AV instead.

Comment #7.1 by: buffalobill on 02 May 2011, 20:41 GMT

System restore fixed it for me


Comment #8 by: versace on 15 Nov 2010, 09:44 UTC reply to this comment

The virus was in my User Application Data folder. Created a new user and could bypass it and delete. Very malicious code.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM