Threat Found Alert

8 November 2009 Popup 1 Comment

“Threat Found Alert” is a fake pop-up warning message displayed by quite a few rogue programs to be able to mislead user into purchasing the registered version. This type of alert usually pop-ups from Windows system tray and act as part of Windows security center. Email-Worm.JS.Gigger is a component of this fake warning, stating that this worm is causing damages to the system. In fact, Email-Worm.JS.Gigger do not exist, it was a fabricated detection attempting to complicate security status of victim’s computer.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Behavior
The fake alert pop-ups once rogue programs like Antivirus Pro 2010 and PC Antispyware 2012 infects a computer. These alerts will attempt to deceive users by exhibiting falsified security issues and immature virus detection. Body of this phony notice may contain message similar to this:

Antivirus Pro 2010
Threat Found
Alert
Object:
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{4D5C8C25-D075-11d0-B416-00C04FB90376}, @SHDOCLC.DLL,-868
Threat:
Email-Worm.JS.Gigger
Comment:
This is a dangerous worm. It replicates using Outlook, Outlook Express and mIRC. The worm is written in JavaScript and Visual Basic Script (VBS). It contains destructive payload routines that are able to format the user’s hard disk after reboot, and can delete all files on all available disks…

How to Remove Threat Found Alert

Boot Windows in Safe Mode With Networking

1. First thing to do is to reboot the computer in Safe Mode with Networking to avoid "Threat Found Alert" from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Select Safe Mode with Networking.
- Windows will now start in Safe Mode.

Remove "Threat Found Alert" with MalwareBytes' Anti-Malware

2. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop or any location on your PC.
3. When finish downloading, double-click on the file mbam-setup.exe to install the application.
4. Follow the prompts and install with default configuration.
5. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware

6. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
7. When finished updating, Malwarebytes' Anti-Malware will run. Select Perform full scan on main screen to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to "Threat Found Alert".
10. Restart your computer.

Note: If "Threat Found Alert" prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.