This morning I had the unpleasant experience of this malware.
I'll describe it's behavior so you'll recognize it if it lands on your
computer. It operates as a series of pop-up screens which mimic
the look of Windows Security Center. I ran a virus scan but nothing
showed up. Still something just didn't feel right so I compared the
logos which were close, but not the same. There were 6 or 7 warning
screens which eventually all lead to the pop-up requiring registration
for the latest updated Windows Security Center(?) - your first red
flag. In the bottom right toolbar you'll see a red circle with a white X
as well as a shield which looks like the Windows Security Center icon.
It's tricky though, because it describes it's own behavior while IT's
happening. Arrgg!!! Another screen will start scanning for spyware,
it's bogus as well. It's very confusing - just stay calm. I tried going
to Microsoft's website but received a message "Navigation Blocked"
due to unstable internet browsing. During all this, my system kept
shutting down and restarting. I think you have enough here to
recognize it if it shows up. The fix:
I ran Windows Defender 3 times only to have the malware come
back. It seems it just keeps replicating itself. I tried to reconfigure
the start-ups in MSCONFIG only to have the icons reappear upon
restarting. Finally I disabled Windows Defender and downloaded
Computer Associates Anti Spyware which seems to have put an end
to the problem - perhaps! Here is an example of what you might
see - but the messages I received were only similar in nature.
This trojan can also change your home page, default search engine,
internet security zone settings and enable ActiveX controls. It's a
ploy to get you to download it's rogueware and it attaches to the
registry. It appears Windows Defender was unable to prevent this
malware from reasserting itself. A virus scan will not pick this up
because it's not really a virus - it's pop-up malware and requires
anti-spy software to remove it. I hope this description helps should
you encounter this event. Feel free to contact me if you have any
questions.
Gail MacMillan Broker-Realtor®
Home Sweet Home Florida Realty, Inc.
At Home With Diversity (AHWD)
Certified Residential Specialist (CRS)
e-PRO Internet Certified (e-PRO)
Graduate Realtor Institute (GRI)
Relocation Specialist
Titusville, Florida
Cell: 321.544.6808
www.HomeSweetHomeFlorida.com great website - check it out - pass it on
Also posted at: http://activerain.com/blogs/homesweethomeflorida