How To Uninstall / Remove The Fake Microsoft Security Essentials Alert Trojan … – Soft Sailor (blog)
The Fake Microsoft Security Essentials Alert Trojan is a malware software which uses various deceiving tactics to infect computers and makes users think that their computers are infected and it offers five anti-malware applications for users to buy. The Fake Microsoft Security Essentials Alert Trojan uses a similar name as the Windows Microsoft Security Essentials application, which is a legitimate anti-malware program. This Trojan displays an alert called Microsoft Security Essentials which says that your computer is infected with a trojan and that you need to remove it right away. The trojan that this virus finds is called ‘Unknown Win32 / Trojan’ and the Fake Microsoft Security Essentials Alert Trojan virus tells you that you need to clean your PC, but after you click the ‘Clean Computer’ or the ‘Apply actions’ button, you will see a message that says that it couldn’t remove the trojan and that you need to scan your PC online. After you click ‘Scan Online’, the Trojan will then display a list with 35 anti-virus applications. In this list of 35 anti-virus applications, only 30 are real anti-virus application, which means that 5 of them are viruses distributed by the Trojan. See the 5 rogue anti-virus applications below :
- Major Defense Kit
- Pest Detector 4.1
- Red Cross Antivirus
- AntiSpySafeguard / AntiSpy Safeguard
- Peak Protection 2010
All these rogue anti-virus applications are the only ones from the list that will find that so-called infection in your computer. Also, it has a Free Install button right next to their names to make you install a fake anti-virus applications on your PC. These 5 fake anti-virus applications are all clones and all of them are viruses. In the image below you can see exactly how these fake anti-virus programs are highlighted to make you think that these are legitimate and that you should install them on your PC, when in fact these apps are viruses which infects your system.

Fake Anti-Virus Applications
After that your system will be restarted and the fake anti-virus that you selected to install will start scanning your computer after Windows loads. After the scanning process is completed, it will display a screen which tells you that some viruses were removed but not all them, and in order to completely clean your system you need to buy the full version of the rogue anti-virus. The rogue antivir will block various applications and it displays the below false warning alerts and also it displays various taskbar false warnings:
- The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons. This happened because the application was infected by a malicious program which might pose a threat for the OS. It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.
- Warning! Database updated failed! Database update failed! Outdated viruses database are not effective can’t guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!
- Warning! Running trial version! The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!
So, as i said before, all these security related warnings are false and you should completely ignore them. This trojan virus tries to fool users by making them believe that if they buy the full version they will manage to remove the viruses from their computers. If you already downloaded and installed Peak Protection 2010, Major Defense Kit, AntiSpySafeguard, Pest Detector 4.1 or Red Cross Antivirus on your computer, at least i hope that you didn’t purchased any of these fake antivirus programs. In case you bought any of those 5 rogue antivirus applications you should contact immediately your credit card company and explain that the purchase you made it was a virus and that you want your money back.
This being said, we should get to the steps that you need to follow in order to completely remove the Fake Microsoft Security Essentials Alert Trojan virus and other viruses :
- First you need to save this instructions on another PC or you can choose to print them out, because at a further point you will be forced to close all the opened windows and running programs.
- Also, this virus might prevent you from downloading any software that can be used to remove it from your infected PC. This means that you need to download the malware removal application on other PC and then transfer the files on the infected PC with a memomry stick or you can burn them on a CD or DVD.
- Now you need to download the Rkill.com application, which is a tool capable of terminating all the malicious processes currently running on your infected PC. Click here to download Rkill.com
- After you downloaded Rkill.com, you can start it right away without the need to install it. Rkill will begin to terminate all the malicious processes and when it finishes its job, the black window will close. Also you should know that the Trojan might display a warning message that says that the Rkill.com program is a virus, this is false and the Virus does in order to protect itself against removal. Leave the warning message opened and start Rkill.com until the false messages disappears completely and the Fake Microsoft Security Essentials Alert Trojan Virus isn’t running no more. If Rkill.com is unable to stop this Trojan from running, then you can try the eXplorer.exe or the iExplore.exe. After you perform this, please DO NOT RESTART your computer, because when Windows loads, the malicious processes will be re-enabled.
- Now you need to download Malwarebyes’ Anti-Malware from here. Malwarebytes’ is a virus removal tool.
- After you downloaded Malwarebytes’, install it by double clicking on its desktop icon. After the installation process starts you need to leave all the default settings just the way these are configured. When installation is completed you need to make sure that the ‘Launch Malwarebytes’ Anti-Malware’ and ‘Update Malwarebytes’ Anti-Malware’ are checked. Click Finish. If Malwarebytes’ asks you to restart your PC, please DO NOT RESTART it.
- Now Malwarebytes’ Anti-Malware, aka MBAM, will start. If MBAM asks you to update its version, allow it or you can choose to click OK as it already performed an updating process. After that you will be taken to its main menu.
- Now you should see the Scanner menu. Select the ‘Perform Full Scan’ box and then press the ‘Scan’ button. MBAM will now start scanning your computer for the Fake Microsoft Security Essentials Alert Trojan and other infected files.
- Now MBAM is in the middle of the scanning process and it might take a little longer than expected. Please return to the computer from time to time to see if the scanning process is complete. When the scanning is completed, MBAM will display a pop-up message which says that your system has been scanned. Click OK and get to the next step of the removal guide.
- Now, the Scanner menu is displayed again and you need to click ‘Show Results’.
- After the results are displayed you need to press the ‘Remove Selected’ button and Malwarebytes’ will start removing all the viruses from your computer. In the removal process, MBAM will ask you to restart your computer to complete removing all the infected files. Now you can allow it to restart your PC. After Windows logs back in, you can get to the next step.

Malwarebytes' Scanning Results
- Now that Malwarebytes’ managed to remove all the infected files, it will display a scanning log. Review it. After you close the log you can close MBAM also.
I hope that you understood easily what you need to do in order to remove the Fake Microsoft Security Essentials Alert Trojan virus from your computer.
This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read our FAQ page at fivefilters.org/content-only/faq.php
Five Filters featured article: "Peace Envoy" Blair Gets an Easy Ride in the Independent.