Personal Protection
Created: 02 Jan 2010 | Updated: 11 Sep 2010 | 4 comments
I have a virus that must have come from a pop up that shows a screen called Personal Security and asks for 59.99 to
download software. I get it any time I try to gor to a web site. Anyone know the name of this virus and how to get rid
of it
Discussion Filed Under:
Comments 4 Comments • Jump to latest comment
Check if you have these files, if so please submit it to Symantec , so that we can have a definitions for it.
Personal Security virus will modify Windows Registry and add the following entries:
The threat will drop the following malicious files:
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Fake "extortionware" A/V software like this have a tendancy to create tons of variants to avoid detection. If you get the files to Symantec, they'll be able to get it fixed for you. Otherwise, if you need to get rid of them quickly, there are special tools out there just for removal of Fake A/V.
Eric C. Lukens IT Security Policy and Risk Assessment Analyst University of Northern Iowa
a user had this popup on both W7 and XP.
On W7, they clicked cancel in theinstallation request popup - the malware then installed itself - coudl be seen in Add / Remove Programs
The second time, on XP, they did not click anything, just killed the IE browser window displaying the spoofed infection warnings and the install request. Nothing appears in Add/Remove Programs.
SEP did not detect anything in either case.
No idea where this launches from - Facebook perhaps? How does this get onto a PC without any kind of detection? Would TruScan detect this as malware?
Hi you can try a free online virus scanner like House call from Trend micro see what it finds
good luck
Would you like to reply?
Login or Register to post your comment.