Microsoft security software detects and removes this threat.

This rogue security program falsely claims that your PC is infected with malware. It then encourages you to pay for a product to remove the "threats" from your PC.

See the Win32/FakeSpypro family description for more information.

What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Advanced troubleshooting

To restore your PC, you might need to download and run Windows Defender Offline. See our advanced troubleshooting page for more help.

Get more help

You can also ask for help from other PC users at the Microsoft virus and malware community.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

See the Win32/FakeSpypro family description for more information.


Symptoms vary among different distributions of Win32/FakeSpypro. See the Win32/FakeSpypro family description for more information.


Alert level: Severe
First detected by definition: 1.49.2750.0
Latest detected by definition: 1.185.1239.0 and higher
First detected on: Jan 29, 2009
This entry was first published on: Aug 17, 2010
This entry was updated on: Sep 05, 2014

This threat is also detected as:
  • FakeAlert-C.dr (McAfee)
  • SpywareProtect2009 (Symantec)
  • Troj/FakeAV-LS (Sophos)
  • Win32/Adware.SpywareProtect2009 (ESET)
  • Trojan.Win32.FraudPack.kho (Kaspersky)
  • Spyware Protect 2009 (other)
  • Antivirus System Pro (other)
  • Barracuda Antivirus (other)
  • Security Central (other)
  • Antivirus Soft (other)
  • Antivirus Suite (other)
  • Antivirus Live (other)
  • Antispyware Soft (other)
  • AV Security Suite (other)
  • Antivir Solution Pro (other)
  • Trojan:Win32/FakeSpypro (Microsoft)
  • Antivirus Action (other)
  • Antimalware Go (other)
  • AntiVira Av (other)
  • Antivirus .NET (other)
  • Antivirus Scan (other)