Home Malware Programs Fake Warning Messages Warning! Virus Invasion Detected!

Warning! Virus Invasion Detected!

Posted: June 27, 2011

'Warning! Virus Invasion Detected!' is a fake infection warning that's used by rogue security programs such as Antivirus .NET and Personal Shield Pro. These threats will create 'Warning! Virus Invasion Detected!' errors and other false positives to make you think that purchasing a registered version of their software will fix these problems. However, since these viruses and other 'Warning! Virus Invasion Detected!' threats don't exist, you should never purchase Personal Shield Pro or any related rogue security program. By using security software to delete 'Warning! Virus Invasion Detected!' programs, you can safely remove all related 'Warning! Virus Invasion Detected!' problems without becoming the victim of fraud.

Identifying the Fake 'Warning! Virus Invasion Detected!' Alert

'Warning! Virus Invasion Detected!' is used by multiple threats that also share most of their code and basic appearance with each other. Some known users of 'Warning! Virus Invasion Detected!' include Antivirus Scan, Personal Shield Pro, Antivirus .NET, Spyware Protect 2009 and Antivirus Soft. The majority of these rogue security programs use a familiar shield icon and an interface that looks like an official security software product.

Rogue security programs like the ones noted above will claim that they can find and remove threats on your PC. However, Personal Shield Pro and other programs that use 'Warning! Virus Invasion Detected!' alerts will only pretend to detect threats before requesting money to remove them. Along with 'Warning! Virus Invasion Detected!' warnings, you may also see other alerts, such as:

Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a Trojan-dropper or similar. Threat: Win32/Nuqel.E

Security Alert
Virus Alert!
Application can't be started! The file [application file] is damaged. Do you want to activate your anti-virus software now?

Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Why 'Warning! Virus Invasion Detected!' and Its Fake Virus is the Least of Your Troubles

Although you may be plagued by a flood of 'Warning! Virus Invasion Detected!' warnings and other useless pop-ups, the rogue security applications that create these warnings may also indulge in more dangerous behavior. Notable attacks that are used by threats that are affiliated with 'Warning! Virus Invasion Detected!' warnings can include:

  • Launching themselves automatically when Windows loads. This allows rogue security programs to display 'Warning! Virus Invasion Detected!' errors and cause other attacks without requiring you to launch the program.
  • Remaining active in the form of a background memory process. Personal Shield Pro and similar threats may pretend to close if you try to close them, but can remain active in memory.
  • 'Warning! Virus Invasion Detected!' alerts and other pop-up warnings may be displayed when rogue security programs attempt to prevent an application from launching. Although the threat will make the claim that the application is infected, the reality is that 'Warning! Virus Invasion Detected!'-using threats will block applications to prevent you from accessing anti-virus and security features.
  • You may also experience symptoms of browser hijacks that alter the behavior of your web browser. Hijacks can embed links in online content, change search results, create error screens or pop-ups and control which websites you're able to visit.

Despite the level of hindrance involved, any 'Warning! Virus Invasion Detected!' threat infection can be resolved by removing 'Warning! Virus Invasion Detected!' with a good anti-virus program. Using Safe Mode and fully updating your software are both recommended before beginning a full system scan to get rid of 'Warning! Virus Invasion Detected!' and other threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Temp%\[RANDOM CHARACTERS]\
    2 %Temp%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download ?gCheckExeSignatures?h = ?eno?fHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download ?gRunInvalidSignatures?h = ?f1??HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter ?gEnabled?h = ?f0??HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings ?gProxyEnable?h = ?f1??HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings ?gProxyOverride?h = ?g?hHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings ?gProxyServer?h = ?f127.0.0.1:33554??HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations ?gLowRiskFileTypes?h = ?e.exe?fHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ?g[RANDOM CHARACTERS]?gHKEY_CURRENT_USER\Software\[RANDOM CHARACTERS]

One Comment

Loading...