Title: Trojan.FakeAlert

Type: Trojans

Remove Trojan.FakeAlert. Removal instructions

Severity scale:

(45 / 100)

Trojan.FakeAlert belongs to a group of trojans, which aid rogue anti-spyware programs, just like Zlob. Trojan.FakeAlert infects the system nefariously and changes the desktop background image into a message, which says the user is infected. This is done to intimidate the user so he would buy the fake "licensed version" of whichever rogue anti-spyware program is being promoted.

The existence of Trojan.FakeAlert means that you have been infected by a rogue anti-spyware program. Both the trojan and the rogue should be removed upon detection.

Related files: rpnqrdnm.exe, runsrv32.exe, tcpservice2.exe, susp.exe, users32.exe, zserv.dll, wstart.dll, winflash.dll, udpmod.dll, runsrv32.dll, questmod.dll, pynix.dll, jao.dll, bridge.dll, yod.htm, sumsw32.exe, ~wa6psetup.exe, Personal Security Center Monitor, isc_ui.exe, isc_cpl.cpl, temlxopqrxg.dll, temlxopqbmp.dll, mgmrwmrv.exe, temlxopqwsp.dll

Automatic Trojan.FakeAlert removal:

remover for Trojan.FakeAlert

SpyHunter is recommended remover to uninstall Trojan.FakeAlert. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Trojan.FakeAlert using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)

XoftSpySE Anti Spyware

download | review

Trojan.FakeAlert manual removal:

FORUM:
Discuss Trojan.FakeAlert in
spyware removal forum

Kill processes:
rpnqrdnm.exe runsrv32.exe tcpservice2.exe susp.exe users32.exe sumsw32.exe ~wa6psetup.exe isc_ui.exe mgmrwmrv.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\clsid\{60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b}
60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b
SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls\System Security Center
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\2016a466-91a2-43c6-97d8-2fd380f065ef
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\eitheror
2016a466-91a2-43c6-97d8-2fd380f065ef
{238E8B73-4015-460E-BBB5-70A4CADD30AF}
{566C6071-FBB6-490C-A333-E489DDE9424D}
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\USERINIT\userinit
Windows\CurrentVersion\Explorer\Browser Helper Objects {952A0FBE-E225-450F-A518-E55805DAF6AC}

HELP:
how to remove registry entries

Unregister DLLs:
zserv.dll wstart.dll winflash.dll udpmod.dll runsrv32.dll questmod.dll pynix.dll jao.dll bridge.dll temlxopqrxg.dll temlxopqwsp.dll

HELP:
how to unregister malicious DLLs

Delete files:
rpnqrdnm.exe runsrv32.exe tcpservice2.exe susp.exe users32.exe zserv.dll wstart.dll winflash.dll udpmod.dll runsrv32.dll questmod.dll pynix.dll jao.dll bridge.dll yod.htm sumsw32.exe ~wa6psetup.exe Personal Security Center Monitor isc_ui.exe isc_cpl.cpl temlxopqrxg.dll temlxopqbmp.dll mgmrwmrv.exe temlxopqwsp.dll

HELP:
how to remove harmful files

Information added: 2008-04-17 03:13:30
Information updated: 2009-11-08 09:11:10

Additional resources related to Trojan.FakeAlert:

Attention: If you know or you have a website or page about Trojan.FakeAlert removal, feel free to add a link to this list: add url

more resources

<Guest>

"Personal Security Center Monitor" is not a valid file name
Some registry keys above are incomplete

Thank you for continuing to post removal instructions.

Reply »

2009 11 08

Post Comment:

Attention: Use this form only if you have additional information about Trojan.FakeAlert parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.