Microsoft purges phony security software

[DelJo63]

November 21, 2008 (See This Computerworld Article) Microsoft Corp. said that the anti-malware tool
it pushes to Windows users as part of Patch Tuesday removed fake security software
from nearly a million PCs during nine days this month.

... In the period from Nov. 11 to 19, according to Scott Wu, Scott Molenkamp and Hamish O'Dea, MSRT purged more than 994,000 machines of what the tool recognizes as "W32/FakeSecSen," the malware label for a broad range of bogus security program with names such as "Advanced Antivirus," "Spyware Preventer," "Ultimate Antivirus 2008" and "XPert Antivirus."

[edit] documentation on the newest tool here[/edit]

 

[Blind Dragon]

Good eye - we have been seeing a lot of this lately

And here is a page to manually download the tool if you are not able to receive updates

http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en


Edit::

And here is some instructions that I typed up a while back when Mydoom/ Sasser were popular

Step 1
a. Click Start button
b. In the Start Search box, type timedata.cpl, and then press ENTER. The Date and Time dialog box opens.
c. On the Date and Time tab, click Change date and time. If the User Account Control dialog box opens, click Continue.
d. If you are prompted to type an administrator password, and you see administrator account names listed, you are not logged on with a computer administrator account. Type the administrator password and press ENTER. If you do not know the administrator password, you may have to ask the administrator of your computer for help.

Otherwise, if you are not prompted to type an administrator password, you are already logged on with a computer administrator account. Click Cancel, and then click Cancel again to close the Date and Time dialog box. Go to step 2.

Step 2
a. Click Start button, point to All Programs, and then click Windows Update.
b. In the left pane, click Change settings.
c. Click to select Install updates automatically (recommended).
d. Under Recommended updates, click to select the Include recommended updates when downloading, installing, or notifying me about updates check box, and then click OK. If you are prompted for an administrative password or for confirmation, type the password or provide confirmation. Go to step 3.

Step 3
Download the Malicious Software Removal Tool. Click Download then You must accept the Microsoft Software License Terms. The license terms are only displayed for the first time that you access Automatic Updates.

Step 4
Right click the icon on your desktop and select Run As Administrator
Click Next
Click Full Scan then click Next
Let the tool run