Remove Trojan.FakeAlert
Removal instructions

Severity scale:  
  (45/100)
Trojan.FakeAlert | Type: Trojans
Trojan.FakeAlert belongs to a group of trojans, which aid rogue anti-spyware programs, just like Zlob. Trojan.FakeAlert infects the system nefariously and changes the desktop background image into a message, which says the user is infected. This is done to intimidate the user so he would buy the fake "licensed version" of whichever rogue anti-spyware program is being promoted.

The existence of Trojan.FakeAlert means that you have been infected by a rogue anti-spyware program. Both the trojan and the rogue should be removed upon detection. Related files: susp.exe, winflash.dll, runsrv32.dll

Automatic Trojan.FakeAlert removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Trojan.FakeAlert you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
remover for Trojan.FakeAlert Happiness
Guarantee
Compatible with Microsoft
SpyHunter is recommended remover to uninstall Trojan.FakeAlert. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Trojan.FakeAlert using SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

STOPzilla
We are testing STOPzilla's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)
SpyHunter
We are testing SpyHunter's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Trojan.FakeAlert (2009-11-08 11:48:25)
Virus Removal Phone Support
1-877-657-9614
Help Line to remove Trojan.FakeAlert

Trojan.FakeAlert manual removal

Kill processes:
rpnqrdnm.exe
runsrv32.exe
tcpservice2.exe
susp.exe
users32.exe
sumsw32.exe
~wa6psetup.exe
isc_ui.exe
mgmrwmrv.exe
Delete registry values:
HKEY_CLASSES_ROOT\clsid\{60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b}
60e2e76b-60e2e76b-60e2e76b-60e2e76b-60e2e76b
SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls\System Security Center
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\2016a466-91a2-43c6-97d8-2fd380f065ef
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\eitheror
2016a466-91a2-43c6-97d8-2fd380f065ef
{238E8B73-4015-460E-BBB5-70A4CADD30AF}
{566C6071-FBB6-490C-A333-E489DDE9424D}
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\USERINIT\userinit
Windows\CurrentVersion\Explorer\Browser Helper Objects {952A0FBE-E225-450F-A518-E55805DAF6AC}
Unregister DLLs:
zserv.dll
wstart.dll
winflash.dll
udpmod.dll
runsrv32.dll
questmod.dll
pynix.dll
jao.dll
bridge.dll
temlxopqrxg.dll
temlxopqwsp.dll

Delete files:
rpnqrdnm.exe
runsrv32.exe
tcpservice2.exe
susp.exe
users32.exe
zserv.dll
wstart.dll
winflash.dll
udpmod.dll
runsrv32.dll
questmod.dll
pynix.dll
jao.dll
bridge.dll
yod.htm
sumsw32.exe
~wa6psetup.exe
Personal Security Center Monitor
isc_ui.exe
isc_cpl.cpl
temlxopqrxg.dll
temlxopqbmp.dll
mgmrwmrv.exe
temlxopqwsp.dll

Geolocation of Trojan.FakeAlert

Map reveals the prevalence of Trojan.FakeAlert. Countries and regions that have been affected the most are: United States.

Information added: 04/17/08 03:13; information updated: 11/08/09 09:11

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Comments on Trojan.FakeAlert

0
0
<Guest>
"Personal Security Center Monitor" is not a valid file name
Some registry keys above are incomplete

Thank you for continuing to post removal instructions.
More comments...

Post a comment

Attention: Use this form only if you have additional information about Trojan.FakeAlert parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)
Like us on Facebook
Read on mobile
News
Press Mentions
I failed to remove Trojan.FakeAlert using SpyHunter.

Email


Close
add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!