Follow:

 

Rogue:JS/FakeAlert


Microsoft security software detects and removes this threat.

This threat is detected in a webpage that shows a fake security scanner. It falsely tells you that your PC is infected with viruses and that you need to install other software to disinfect it. The software it offers for install is usually a rogue security software, which doesn't clean your PC and instead tells you that you need to pay for more, nonexistent, cleaning.

See the Rogue security software page for more information.



What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

Rogue:JS/FakeAlert is detected in a webpage that shows a fake security scanner. It falsely tells you that your PC is infected with viruses and that you need to install other software to disinfect it. The software it offers for install is usually a rogue security software, which doesn't clean your PC and instead tells you that you need to pay for more, nonexistent, cleaning.

Read more about rogues from our Rogue security software page.

You might be redirected to these fake scanner webpages through a variety of ways, including clicking on misleading ads, visiting malicious or hacked websites, or by clicking on poisoned search results.

The typical scenario is as follows: your browser opens a webpage saying something similar to Viruses were found in your PC!. A dialog box might also appear with the message Microsoft Antivirus has found critical process activity on your PC. You need to clean your PC to prevent the system breakage. It is important to note that these claims are false and are used to mislead you.

Analysis by David Wood


Symptoms

The following could indicate that you have this threat on your PC:

  • A webpage opens up with this message, or a similar message:
    • Viruses were found in your computer!
    • Microsoft Antivirus has found critical process activity on your PC. You need to clean your computer to prevent the system breakage.

Prevention


Alert level: Severe
First detected by definition: 1.155.2132.0
Latest detected by definition: 1.155.2132.0 and higher
First detected on: Aug 13, 2013
This entry was first published on: Aug 13, 2013
This entry was updated on: Aug 25, 2014

This threat is also detected as:
  • JS/Fraud.NAS!tr (Fortinet)
  • Trojan.Win32.FakeAV (Ikarus)