Fake Antivirus Software - Comments Page 1

This rogue anti virus program has now been installed on my computer: Total Security. I don't know how it got on my computer, but it has rendered it useless. It will not allow any executable to run (.exe .com, etc.) so I cannot run real antivirus spyware to get rid of it. Because of this, I cannot run regedit either to delete the lines it has added. Also, System Restore will not run. How can I get it off the computer? I'm sure there must be something I can do from a DOS prompt but need help. Thanks for your help.

This fake antivirus just happened on our church computer yesterday. The secretary called me and I told her to get out of it immediately. Wish I had known not to use the mouse. She had a hard time getting out of it and all kinds of porn advertisements, etc. came up. We had it cleaned up by a computer professional. We have AVG antivirus (purchased) but it apparently did not catch this one.

These fake virus alerts are often picked up by visiting suspect sites eg adult, program crack sites,gambling,free games,screen saver and smiley sites to name just a few.

Check an unknown site out first with "McAfee Site Advisor" which is free and safe {uncheck Yahoo tool bar during the install process}
Close down suspect programs via the Task Manager..do not click on anything as rouge programs are usully booby trapped and clicking will often make it install more badware !!

Jp

Rick-I had TOTAL SECURITY virus and spent days trying every suggestion I could find...nothing worked...until I learned this:
Reboot your system; immediately as soon as your splash screen comes up press ctl.alt.del. to get into your Windows Task Manager. Go to processes and find a file that is numbers only. Delete it. I guarantee you'll be rid of that trash! Be sure to get a good antivirus. Bob always has great suggestions.

There is a great program called combofix which is really good at removing those hard to reach fake antivirus programs

I got one of these virus, for the first time, yesterday. They certainly let you know that they are there .... almost too obvious. I did click in the box, but it then became superactive. I got task manager started went to the application page highlighted the firefox browser, then stopped it running.
At that stage, the abnormal activity stopped, but I thought it wise to close the computer and do a detailed scan (ZoneAlarm). This (HEUR Trojan Win32 Generic) has now been in Quarantine for one day. There is an option to delete it, but I have not that yet.

Hello Bob
As I guess most people know, Microsoft offer free anti-virus and anti-spy ware for genuine Windows operating systems called 'Security Essentials'.
I've downloaded the program which appears to be effective and updates automatically to include latest detected malware definitions.

Do you recommend keeping Windows Defender running in conjunction with 'Security Essentials'?

Personally, I don't like having unnecessary programs running which are just using up resources for no good reason and so I de installed Defender figuring that Security Essentials has similar if not and identical program that adequately deal with spy-ware.

Cheers and best wishes

I've been hit with these things so many times I can almost smell them the minute they infect my machine. Sadly, sometimes it's too late to simply close my browser to stop it. What does work is to shut down my machine completely then:

1. Restart in safe mode.
2. Run a full anti-virus scan (I use Trend Micro)
3. Follow that with a complete Malwarebytes scan.

Whatever they find I either quarantine or delete. I keep these apps updated at all times, since you can't update in safe mode. This is important because malware and viruses change so fast that you need the latest information to identify them. If you know your machine like I know mine, you'll notice a change in its behavior almost instantly. And when that happens it pays to act quickly. Let's face it, the bad guys are out there just waiting for us to drop our guard for a split second. Sad, ain't it?

When all else fails in the bogus anti-virus war I have had very good results going to a Restore Point dated prior to the attack.

Sometimes rouge anti viruses come as a popup and are not in a "browser window", on those occasions use a very old trick, instead of your mouse, just press Alt and F4 on your keyboard. Works on other popups as well.