<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: FakeAlert Trojan Holds Systems For Ransom</title>
	<atom:link href="http://blogs.mcafee.com/mcafee-labs/2009/05/12/fakealert-trojan-holds-systems-for-ransom/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom</link>
	<description></description>
	<lastBuildDate>Wed, 23 May 2012 15:26:06 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Mark</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-149631</link>
		<dc:creator>Mark</dc:creator>
		<pubDate>Sun, 12 Jun 2011 09:38:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-149631</guid>
		<description>This virus has landed on my PC and i managed to get Mcafee to run a full scan and clean up.  but it has left my pc running slow and forces programs to crash shortly after starting.  IS there something i should do.  i am of a mind to reformat the hard drive and start again.</description>
		<content:encoded><![CDATA[<p>This virus has landed on my PC and i managed to get Mcafee to run a full scan and clean up.  but it has left my pc running slow and forces programs to crash shortly after starting.  IS there something i should do.  i am of a mind to reformat the hard drive and start again.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: S Godfrey</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-144781</link>
		<dc:creator>S Godfrey</dc:creator>
		<pubDate>Sun, 22 May 2011 17:06:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-144781</guid>
		<description>I had one of these and I am still trying to get rid of the trojan with Stinger.

What a pain in the tooch! Not sure where this &quot;malware protection&quot; program came from but they made the icon look like Windows.

I was able to go into safemode and restore so that I could free up my browsers and get Stinger installed.  I forgot to turn off my system restore the first scan so they couldn&#039;t be removed. but the second scan should.
I run McAffee Total Protection and have all files checked real-time.  Why did the program not catch it?</description>
		<content:encoded><![CDATA[<p>I had one of these and I am still trying to get rid of the trojan with Stinger.</p>
<p>What a pain in the tooch! Not sure where this &#8220;malware protection&#8221; program came from but they made the icon look like Windows.</p>
<p>I was able to go into safemode and restore so that I could free up my browsers and get Stinger installed.  I forgot to turn off my system restore the first scan so they couldn&#8217;t be removed. but the second scan should.<br />
I run McAffee Total Protection and have all files checked real-time.  Why did the program not catch it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: j davis</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-23956</link>
		<dc:creator>j davis</dc:creator>
		<pubDate>Sun, 22 Nov 2009 22:47:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-23956</guid>
		<description>As long as the laws dealing with this kind of fraud are weak scammers will continue to reap millions from unsophisticated users. Recently the FTC settled with James Reno of winfixer infamy for only $160,000. It has been estimated that the people behind this malware made in excess of $36 million!! As can be seen the law is no deterrent. Kind of like Keven Trudeau of infomercial scam fame. He regularly settles with the FTC and still makes millions. Prison time for these kinds of crimes should be mandatory--very serious prison time!! There is a very effective way to avoid being infected with rogue security programs--use a browser like Firefox that is less susceptible to malware---and--- when the original rogue popup appears disconnect from the internet and restart. When I see one of these pop ups I shut my pc off manually and restart.  When the rogue pop up appears DO NOT CLICK ANYWHERE ON THE DIALOG BOX!! If you do most of these rogues will do a drive by install regardless of your wishes. Even clicking the &#039;x&#039; at the top of the dialog box can trigger an unwanted download.</description>
		<content:encoded><![CDATA[<p>As long as the laws dealing with this kind of fraud are weak scammers will continue to reap millions from unsophisticated users. Recently the FTC settled with James Reno of winfixer infamy for only $160,000. It has been estimated that the people behind this malware made in excess of $36 million!! As can be seen the law is no deterrent. Kind of like Keven Trudeau of infomercial scam fame. He regularly settles with the FTC and still makes millions. Prison time for these kinds of crimes should be mandatory&#8211;very serious prison time!! There is a very effective way to avoid being infected with rogue security programs&#8211;use a browser like Firefox that is less susceptible to malware&#8212;and&#8212; when the original rogue popup appears disconnect from the internet and restart. When I see one of these pop ups I shut my pc off manually and restart.  When the rogue pop up appears DO NOT CLICK ANYWHERE ON THE DIALOG BOX!! If you do most of these rogues will do a drive by install regardless of your wishes. Even clicking the &#8216;x&#8217; at the top of the dialog box can trigger an unwanted download.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mikus</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-23955</link>
		<dc:creator>Mikus</dc:creator>
		<pubDate>Mon, 03 Aug 2009 07:21:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-23955</guid>
		<description>Had this SS 2009 and b/c it quickly closes ANY program you open.  Without being able to open programs like taskmanager or msconfig.exe to try and remove one or wo of it&#039;s operating files one cannot go about stoping the SS 2009&#039;s processes.

I restarted in windows SAFE MODE and run [regedit] and deleted one or two of its registry files (HKLM/Software/Microsoft/Current Version/Run and also it&#039;s 2009 support link which was in my Documents and settings/allusers/App Dat/user profile/satrt menu/programs/system Security 2009 link

Then I used system restore and restored to a day earlier.</description>
		<content:encoded><![CDATA[<p>Had this SS 2009 and b/c it quickly closes ANY program you open.  Without being able to open programs like taskmanager or msconfig.exe to try and remove one or wo of it&#8217;s operating files one cannot go about stoping the SS 2009&#8242;s processes.</p>
<p>I restarted in windows SAFE MODE and run [regedit] and deleted one or two of its registry files (HKLM/Software/Microsoft/Current Version/Run and also it&#8217;s 2009 support link which was in my Documents and settings/allusers/App Dat/user profile/satrt menu/programs/system Security 2009 link</p>
<p>Then I used system restore and restored to a day earlier.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Giovanni</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-23954</link>
		<dc:creator>Giovanni</dc:creator>
		<pubDate>Sat, 25 Jul 2009 06:43:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-23954</guid>
		<description>use windows preinstallation enviroment:) thats how i got rid of it</description>
		<content:encoded><![CDATA[<p>use windows preinstallation enviroment:) thats how i got rid of it</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: lynn mcdaniel</title>
		<link>http://blogs.mcafee.com/mcafee-labs/fakealert-trojan-holds-systems-for-ransom/comment-page-1#comment-23953</link>
		<dc:creator>lynn mcdaniel</dc:creator>
		<pubDate>Sun, 21 Jun 2009 00:39:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.labs.com/research/blog/?p=1540#comment-23953</guid>
		<description>so far fake alert is holding 2 of m pcs for ransom andive downloaded spy doctor offline and it helped the other spyware take effect but the other pc wont clean up and i cant go online cause it has stopped me and i cant get into safe mode it skips that page completely its an older pc and wont download service pack 2 for me to get mcafee.</description>
		<content:encoded><![CDATA[<p>so far fake alert is holding 2 of m pcs for ransom andive downloaded spy doctor offline and it helped the other spyware take effect but the other pc wont clean up and i cant go online cause it has stopped me and i cant get into safe mode it skips that page completely its an older pc and wont download service pack 2 for me to get mcafee.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

