DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2617291 - Last Review: April 9, 2013 - Revision: 2.0

Symptoms

While browsing the Internet or working on your computer after browsing the internet, you may notice that a new window titled PC Repair may open, you are asked to defragment your computer and then asked for personal information such as your email address. This is a variant of the Win32/FakeSysdef malware and can delete or hide files as well as engage in other malicious activity on your computer.

Resolution

This issue can be resolved and the PC Repair virus removed by running the Microsoft Safety Scanner. To do this, follow the steps below: 
  1. Go to http://www.microsoft.com/security/scanner/en-us/default.aspx (http://www.microsoft.com/security/scanner/en-us/default.aspx) and click the Download Now button.
  2. Follow the on screen instructions to download and install the Microsoft Safety Scanner. When prompted, save the file to your desktop.
  3. Restart your computer and boot into Safe Mode:

    For Windows 7, Windows Vista, and Windows XP:
    1. When starting your computer, repeatedly press the F8 key.
    2. The Windows Advanced Options Menu (Windows XP) or the Advanced Boot Options menu (Windows Vista or Windows 7) will appear. Highlight Safe Mode and press the Enter key.
    3. If you're prompted for Administrator credentials, enter your User Name and Password and click OK.
  4. Double click the Microsoft SafetyScanner icon on your desktop. It may be labeled as msert.
  5. Click the box next to Accept all terms of the preceding license agreement, then click Next.
  6. Click Quick Scan, then click Next.
  7. The Microsoft Safety Scanner will scan your computer. This may take a few minutes. Once the scan is complete, click View detailed results of the scan. You should see Trojan: Win32/FakeSysdef listed in the results.


More information

For more information about the Microsoft Safety Scanner, visit: http://www.microsoft.com/security/scanner/en-us/default.aspx (http://www.microsoft.com/security/scanner/en-us/default.aspx)

For more information about the Win32/FakeSysdef malware and it's variants, visit: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Trojan%3aWin32%2fFakeSysdef&threatid=4295122934 (http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Trojan%3aWin32%2fFakeSysdef&threatid=4295122934)

Microsoft offers a free security program, Microsoft Security Essentials, that will help protect your computer from being infected with malware. For more informaiton about Microsoft Security Essentials, visit: http://www.microsoft.com/en-us/security_essentials/default.aspx (http://windows.microsoft.com/en-us/windows/security-essentials-download)

For information on how to keep your computer safe from hackers, malware, and other malicious activity, visit Microsoft's Safety and Security Center at: http://www.microsoft.com/security/default.aspx (http://www.microsoft.com/security/default.aspx)



Keywords: 
KB2617291
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support