Win32/FakeAlert.N

My best friends father was looking up porn online (Don't worry, I giggled too) and, naturally, got a virus/trojan/spyware ETC. on her computer. She's having a difficult time searching the web for answers because of it and so I offered my assistance. However I've looked up pieces of information specifically about the virus that she had and I couldn't find one thing. So I am probably looking in the wrong place. From what she told me this is the information I've got:

Filename: pphcprhj0en4t.exe
Location: C:\WINDOWS\system32\
Infection: Win32/FakeAlert.N

Now I've seen this somewhere before but I can't remember where. Last time I got rid of a crap load of virus's on her system, I downloaded Ad-Aware, Spybot, ETC. Things to keep it safe from the general weak virus's and that's where this information came from. Any help would be appreciated. I'm off to search!

 

I would recommend SUPERAntiSpyware and Dr.Web CureIt. (Although, obviously, there is more that could be done. )

 

Also try MBAM

According to the malware name (=FakeAlert), it should be a rogue, but I'm not sure. Should be a peace of cake for MBAM and/or SAS.

Maybe you could set her up with some prevention, or you are gonna end up as the official compuetr cleaner every couple of months.

~~~
Off topic comment: In 11 years of Internet, I've NEVER been infected because of porn. Cracks and warez yes. Own stupidity yes. But porn, never. First time I realize that

 

Mhmm. I had her download SAS first. She is currently waiting for it to finish download, which takes a while due to her infection. I thought it might be a rogue. :3 Hopefully SAS is enough to take care of it. Thank you for your input!

 

I'll have her try MBAM~! Thank you.

The problem isn't her, it's her entire family. The conversation actually consisted of:

Ri: Yus
Pimp Sugar Freak: hi...my computer is acting weird because my dad got a verus on it
Ri: Of course he did.
Pimp Sugar Freak: i came home today and my dad walked up to me. "dawn...dont be made. but i was up late last night and got really bored and went onto the computer...I may have looked up porn. but i wont do it again. I learned my lesson...moment of weakness...sorry." (dawn OoO (dad "can you fix the computer?"
Pimp Sugar Freak: (mad...not made)
Ri: LMAO!
Pimp Sugar Freak: and this verus is a botch
Ri: Aha, that's funny.
Pimp Sugar Freak: well it sucks for me
Pimp Sugar Freak: i have pervert people living with me


She's actually never got a virus on her computer. It's always about porn. That song "The Internet is for Porn" really is the truth. XD

 

Maybe you should show her dad some porn sites which are safe

 

2 Girls 1 Cup is safe AND might be enough to keep him off. >]

 

RFLMAO!

But back on topic:
let us know if she needs more help.

 

The download canceled and it wont allow her to to get back on the internet (though internet is still working because she's on messenger) so I'm going to save the EXE it to my flash drive and go off to the rescue in the morning before work. So I'll report back tomorrow.

 

If that doesn't work, try burning Avira RescueCD and perform a boot scan.

 

See CA URL http://ca.com/us/securityadvisor/virusinfo/virus.aspx?id=72098 .

This analysis should allow you to repair your infected PC. Basically, first remove the lphcptrjOejd1.exe item from the Registry to stop auto execution of the bad file! Then delete the three files dropped into the system32 directory.

Remove the EULA registry item. Delete the entire antivirus xp 2008 folder and it's contents from C:\Program Files (this rogue program is not uninstallable via the Control Panel!). Set the two registry items for NoDispBackground and NoDispScrSav to 0 (ZERO). Turn off System Restore.

Reboot to Safe Mode and run your Anti Virus program. Turn on System Restore.

This worked for me!!!