Fake "Windows Security Center"

BleepingComputer.com: Fake "Windows Security Center"

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Fake "Windows Security Center"

#1 revertspecially

New Member

Group: Members
Posts: 11
Joined: 04-April 10

Posted 21 November 2010 - 05:10 PM

So I got one of those obviously fake antivirus programs. I searched online for the symptoms, and it seems I don't have a lot of them. When I started up my browser, one "Windows Security Center" window came up, but other than that I don't get fake warning messages, and my browser and real antivirus programs work fine. Something

I ran scans with Malwarebytes, Spybot, and SuperAntiSpyware. Spybot and SuperAntiSpyware didn't catch anything. Malwarebytes got one "Malware Trace" which it removed. When I restarted, Windows Security Center was still there, along with a new tray icon called "Blocked startup programs" claiming to be Windows Defender.

How do I get rid of this?

Edit: I looked in my Task Manager and there are a few weird processes: 2bac_xp.exe (I have a Vista, not an XP), 33aa01.exe, and avgnt.exe (which has the description Antivirus System Tray Tool). When I try to end the processes, I get the message "Access is denied".

This post has been edited by revertspecially: 21 November 2010 - 05:13 PM