Need to remove FakeAlert-WinwebSecurity.b

[Elbanco]

Hi, my system is destroying by FakeAlert-WinwebSecurity.b virus. This virus is displaying a a popup window which forcing me to buy a certain product. This acquires complete control of my computer restricting to open numbers of application. I eagerly want to remove this virus from my computer. Can any please provide me a removal solution for this virus.

[Big Fish]

This Binary is Trojan Fake alert. As the name, this virus provide a fake alerts to the compromised user computer. And generates a mirage as if the user computer is highly infected which is really not. Then it will show fake balloon tips during clicked it will ask the compromised user to purchase fake antivirus application. FakeAlert-WinWebSecurity.b will without a sound install and execute a virus scan on the system.

[Spyrus]

Symptoms of infection

• Shows a fake alert as if the computer is highly infected.
• Registry changes

Infection mode
Trojans do not self-replicate. Trojans can able spread manually, often below the idea that the exe is something useful. Distribution channels contain IRC, peer-to-peer networks, newsgroup postings, email spam, etc.

[Steve123]

This virus is depends on the exection the FakeAlert-WinWebSecurity.b generates the given registry keys:

• HKEY_USERS\S-1-5-21-602162358-1897051121-839522115-1003_Classes\.exe
• HKEY_CURRENT_USER\Software\Classes\.exe
• HKEY_CURRENT_USER\Software\Classes\secfile
• HKEY_CLASSES_ROOT\.exe
• HKEY_CLASSES_ROOT\secfile

[Shen]

The given registry values are changed into the computer:

• New data: "C:\Documents and Settings\%User%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Intern
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride"]
• New data: 01, 00, 00, 00
• [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess "Start"]
• New data: 2D, 00, 00, 00
• [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess "Start"]
• New data: 04, 00, 00, 00
• New data: 2D, 00, 00, 00