Exploit.JS.Sheat.c

To get users attention, rogue program System Security Antivirus will use a fake warning message displays a possible Exploit.JS.Sheat.c virus infection  on the computer.  Hiding inside a fake Windows Security Center interface, this alert may look like a legitimate one and can easily convince a user to execute it without knowing the danger that it can bring to the system. By clicking on the prompts, another threat can be downloaded into the computer or enhance the presence of whatever rogue program already dropped. The full warning message will be shown as:

Windows Security Center
Virus (Exploit.JS.Sheat.c) was found on your computer!
Click ‘OK’ to install System Security Antivirus.

This warning is false and virus does not really exists on the computer. It was just an scare tactics to force users to buy the licensed version of the fake anti-virus it promotes.

Exploit.JS.Sheat.c Screen Shot:

Exploit.JS.Sheat.c Image

Associated Threat: System Security Antivirus

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Exploit.JS.Sheat.c Removal:

Typical virus removal:
1. System Restore should be temporarily disable to prevent re-establishing the virus ( for Windows Me/XP only). [how to]
2. If there are anti-virus or anti-malware installed, please update the database.
3. Avoid loading the threat on to computers memory by rebooting the computer in SafeMode [how to] 4. Make a thorough scan of the computer and clean or delete all infected files detected.
5. In order to make sure that threat is completely eliminated, carry out a full scan of your system using AntiVirus and Antispyware Software. Another way to remove viruses using various Antivirus Program without the need to install the full program can be done with Online Virus Scanner.

Additional Information:

How does fake alert gets inside the PC?
- Usually, this type of infection can be acquired online, either by downloading files on file-sharing networks, visiting malicious websites, executing executable email attachments or clicking on links sent on instant messaging programs.
- Trojans can take advantage of system’s weakness to be able to penetrate a computer and drop this threat.

What are fake alerts objective?
- If prompts are executed, the threat can connect to a remote host and download additional threats.
- It can kill any running anti-virus, anti-malware or firewall programs.
- Modification can be done on system and Internet browser to hijacked its homepage and redirect to scam web sites.

What to do next...