Home Malware Programs Fake Warning Messages Security Center Alert Popup

Security Center Alert Popup

Posted: December 3, 2008

"Security Center Alert" popup is a fake popup alert that states that Windows Firewall has blocked activity of harmful software. The purpose of the fake alert is to trick you into purchasing the Perfect Defender 2009 rogue anti-spyware program. The following alert is what you would see on your computer screen if you have the "Security Center Alert" popup:

"Security Center Alert
To help protect your computer, Windows Firewall has blocked activity of harmful software.
Do you want to block this suspicious software?
Name: Spyware.ISpynow
Risk Level: High
Description: iSpynow is a Spyware program that records keystrokes and takes screen shots of the computer, stealing personal financial information."

If you see this fake "Security Center Alert" popup, your PC is infected: do NOT purchase the useless Perfect Defender 2009 rogue anti-spyware program. Remove the infection immediately and use a reliable anti-spyware software program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Desktop\sccmsk.dll
    2 %UserProfile%\My Documents\PerfectDefender2009\SDBHO.dll
    3 %UserProfile%\My Documents\PerfectDefender2009\sdcfg.dat
    4 c:\Program Files\Perfect Defender 2009\
    5 c:\Program Files\Perfect Defender 2009\dbbase.div

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "asus32"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PDefenderHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Perfect Defender 2009"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Perfect Defender 2009
Loading...