Win32/FakeAlert.N

Discussion in 'malware problems & news' started by MelarianRi, Jul 18, 2008.

Thread Status:
Not open for further replies.
  1. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    My best friends father was looking up porn online (Don't worry, I giggled too) and, naturally, got a virus/trojan/spyware ETC. on her computer. She's having a difficult time searching the web for answers because of it and so I offered my assistance. However I've looked up pieces of information specifically about the virus that she had and I couldn't find one thing. So I am probably looking in the wrong place. From what she told me this is the information I've got:

    Filename: pphcprhj0en4t.exe
    Location: C:\WINDOWS\system32\
    Infection: Win32/FakeAlert.N

    Now I've seen this somewhere before but I can't remember where. Last time I got rid of a crap load of virus's on her system, I downloaded Ad-Aware, Spybot, ETC. Things to keep it safe from the general weak virus's and that's where this information came from. Any help would be appreciated. I'm off to search!
     
  2. Pseudo

    Pseudo Registered Member

    Joined:
    May 4, 2008
    Posts:
    193
  3. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    Also try MBAM

    According to the malware name (=FakeAlert), it should be a rogue, but I'm not sure. Should be a peace of cake for MBAM and/or SAS.

    Maybe you could set her up with some prevention, or you are gonna end up as the official compuetr cleaner every couple of months.

    ~~~
    Off topic comment: In 11 years of Internet, I've NEVER been infected because of porn. Cracks and warez yes. Own stupidity yes. But porn, never. First time I realize that :D
     
  4. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    Mhmm. I had her download SAS first. She is currently waiting for it to finish download, which takes a while due to her infection. I thought it might be a rogue. :3 Hopefully SAS is enough to take care of it. Thank you for your input! :D
     
  5. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    I'll have her try MBAM~! Thank you. :D

    The problem isn't her, it's her entire family. The conversation actually consisted of:

    Ri: Yus
    Pimp Sugar Freak: hi...my computer is acting weird because my dad got a verus on it
    Ri: Of course he did.
    Pimp Sugar Freak: i came home today and my dad walked up to me. "dawn...dont be made. but i was up late last night and got really bored and went onto the computer...I may have looked up porn. but i wont do it again. I learned my lesson...moment of weakness...sorry." (dawn OoO (dad "can you fix the computer?"
    Pimp Sugar Freak: (mad...not made)
    Ri: LMAO!
    Pimp Sugar Freak: and this verus is a botch
    Ri: Aha, that's funny.
    Pimp Sugar Freak: well it sucks for me
    Pimp Sugar Freak: i have pervert people living with me


    She's actually never got a virus on her computer. It's always about porn. That song "The Internet is for Porn" really is the truth. XD
     
  6. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    Maybe you should show her dad some porn sites which are safe :D :D
     
  7. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    2 Girls 1 Cup is safe AND might be enough to keep him off. >]
     
  8. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    RFLMAO!

    But back on topic:
    let us know if she needs more help.:thumb:
     
  9. MelarianRi

    MelarianRi Registered Member

    Joined:
    May 16, 2005
    Posts:
    22
    Location:
    USA, MA
    The download canceled and it wont allow her to to get back on the internet (though internet is still working because she's on messenger) so I'm going to save the EXE it to my flash drive and go off to the rescue in the morning before work. So I'll report back tomorrow. :eek:
     
  10. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    If that doesn't work, try burning Avira RescueCD and perform a boot scan.
     
  11. Jack Raymond

    Jack Raymond Registered Member

    Joined:
    Aug 6, 2008
    Posts:
    1
    See CA URL http://ca.com/us/securityadvisor/virusinfo/virus.aspx?id=72098 .

    This analysis should allow you to repair your infected PC. Basically, first remove the lphcptrjOejd1.exe item from the Registry to stop auto execution of the bad file! Then delete the three files dropped into the system32 directory.

    Remove the EULA registry item. Delete the entire antivirus xp 2008 folder and it's contents from C:\Program Files (this rogue program is not uninstallable via the Control Panel!). Set the two registry items for NoDispBackground and NoDispScrSav to 0 (ZERO). Turn off System Restore.

    Reboot to Safe Mode and run your Anti Virus program. Turn on System Restore.

    This worked for me!!!
     
Thread Status:
Not open for further replies.