Fake Anti-Spyware Programs - Comments Page 1

combofix.exe (an app in my downloads folder) was deemed infected by SpyHunter (Enigma SW) and MBAW did not find it contained malare. Both dbs were update w/todays latest. I do not remember where I dl'ed it from and have yet to check with Defender. The point is 1 will - 1 won't so be sure to double check with a 2nd anti-malware app.

Yes, I certainly do. It happened quite some time ago but I'm sure it's still happening somewhere. I used a google search to get to the main web page for Spybot Search & Destroy and clicked on the link that looked just like it -- but it wasn't. It was a malware site that had been tricked up to look just like the rear McCoy. I noticed the URL wasn't right before I clicked on anything...but it was close. It's very easy to get faked out.

Plus: NEVER ever download any antivirus/anti-malware programs from any torrent trackers or so-called "mirror sites"; I have had some sad experience with rutracker.org - the advertized copy of the well-known Dr.Web actually appeared to be a Trojan.

Just my two Russian copecks, of course...

These scumbag 'scareware' programs as I would call them are very slick at what they do too to the unwary. I got caught out once some years ago and sometimes you have to learn the hard way. I have forgotten this particular name as it seems to have disappeared but it took over everything to scare me into buying it, plus a search toolbar into IE7. It took some effort to get rid of it but perseverance paid off. I now use a carefully-vetted assortment of antivirus and antimalware tools and utilities that don't slow my PC to a crawl but protect it, and for free as well.

Regarding fake programmes .the one doing the rounds currently in Ireland is "Xp Home Security Systems",Which imposes its self onto your PC and then encourages you to use your credit card for the service they will provide. Not only do they impose the software onto you computer But they phone you a couple of days before hand offering assistance concerning a very serious problem which has arisen via Windows XP which puts your PC security at risk .All you have to do is to switch your computer on and with the help of their technical staff they will be able to direct you through this very serious problem.

Hello.

I have had to remove a couple of these rogue anti-virus programs from friends' computer.
It can take out an entire hard drive if permitted to stay in your computer.

Fortunately there is help out there to remove such programs if you go to sites like www.bleepingcomputer.com
(I highly recommend this site in particular as they give you a comprehensive look at various malware programs out there and most importantly - - How to remove same from your computer!

TheRube.

New York USA

It happened to me! They were using a reputable anti-virus named AVG Professional. I have used AVG free version for years and it is a very good anti-virus. This popped up one evening and started an unstoppable scan. It then told me I was horribly infected and would clean the malware, viruses, etc, from my computer unless I bought the program for $79.95. It blocked me from accessing my browsers, my desktop, everything! Rebooting, shutting down, nothing helped. The next day I had to notify Visa and cancel that card and get a new one issued. Pain in the backside!

I wonder if some of the sites advertised in these newsletter fit that description?

EDITOR'S NOTE: It's possible, but I'd say not terribly likely. The ads served by Google do have to meet certain quality standards, and if any abuse is detected by the millions of people who see them every day, Google is quick to pull down the offending ads.

I got one of those fake "anti spyware "had a heck of a time getting rid of it, wish I could remember it`s name, the only way I found to get rid of it was doing a System Restore, had trouble doing that too had to boot in safe mode, I would really like to get my hands onthe people that make up these 'Virus`s,bet you they wouldn`t be doing it for a while ,with broken fingers, oh well at least I got rid of it, have a good day all tc Ken "flatwoods" Kohler

My Grandpa was almost a victim of such ruses. He never actually paid for anything but he would download pretty much everything that the pop-ups said to. It was a big pain removing everything and explaining to him how that stuff works... Thanks for the info!

Thanks Bob - really good article to help people be alert. There's another nasty take: Internet Security Suite - such a generic name that people are easily fooled - and it is hard to get rid of. Need CC Cleaner and Malwarebytes to remove it. Thanks for sharing, cheers Viv

No, I personally have NOT had any 'Fake Anti-Spyware installed on my personal PC. However, I have had to clean up several PCs from family and friends, who did 'click' on that Pop-Up, so on and so forth. Cleaning those up, was NOT fun and frequently involved reformatting the hard drive, to completely eliminate them.

I have been having Anti-Spyware installed on my PC, since Gibson first called Aureate software, 'Spyware'. I started with Gibson's OptOut and later moved on to Lavasoft's Ad-Aware. So, basically I have had Anti-Spyware on my personal PC, since sometime in 2000.

Over the years, I have changed anti-spyware programs, but mainly stay within the original programs that are tried and proven, Ad-Aware, CCleaner, SpyBot Search & Destroy, Malwarebytes, AVG, Avast!, and a couple of others. I have also, discovered Glarysoft software. Their programs are small, take practically no resources to run and simply work!!! I especially like Glary Utilities and Disk Speed Up. They both do a good job and keep my PC running smooth and quick.

I've had this happen to me as well. I tried to delete the program but it would not go. Finally had to take it in to Staples to have it removed. It also happened on another computer. That time System Restore got rid of it but what a pain in the butt.

There is a comprehensive list of fake anti-malware programs on the Lavasoft website. Trend Micro SHOULD NOT be on the list of good programs. When it protects it is fine. When it gets compromised with malware it can't handle, it locks up the computer in a way that makes even cleaning it up difficult at best. Any time I am hired to clean up a computer from infections, I wince if I find out they had Trend Micro. I also charge a lot more since it will take me a lot longer.

I was hit by a Trojan last week; stopped everything cold. Called itself "Spyware Protection". It prevented access or activation of my MS Security Essentials or on-line Panda, AVG, etc. After going to a "Geek" house to clean it, finding them too busy, I decided to research and see if I could handle it.

I decided to log in under my administrator log-in and, from on-line discussions, I found info indicating actual system files might be duplicated as a hi-jack action and imitating the actual system file. I found the MS0cfg32.exe file was not the right size per system research info. I deleted it, and everything returned to normal and I was then able to run a full battery of scans using MS Sec. Essential. Rather nasty bit of work.

I'm betting it came through a recent download based on your article.

I had a program take over my machine, it wouldn't even let me open task manager. I did a power shut down, opened in safemode and ran Malwarebytes. That seemed to do the trick

Is Norton safe??

It wasn't a fake program but Panda took me for $100.00 when I downloaded and before I could install their program discovered they were automatically going to uninstall my Norton. When I said no, and that since it was never installed, I would like a refund, they said too late, you started the download, it's your loss. Contacted their Tech Services and they said they didn't know it would uninstall Norton.

I'm surprised you didn't mention Patrick Kolla's "Spybot Search and Destroy". It's been around for a long time, is free, and includes real time protection. It has treated me well and protected me for years.

As an Admin in PC Tech in PalTalk, I and many others deal with numerous situations relating to rogueware on a daily basis. Sometimes a system restore will solve the problem and sometimes it will have to be done in safe mode. Sometimes on can use Fake Anti Virus Remover, Malwarebytes and SuperAntiSpyware will work but often Safe Mode is required. Generally before doing anything much, msconfig or Startup in C Cleaner needs to have all items terminated before doing scans. Sometimes the offending rogue will have to be stopped in Task Manager. Sometimes Task Manager has to be accessed at an initial boot by holding down Alt+Ctrl + Del at time of boot until the TM opens. Last solution will be the use of Combo Fix but an expert will be needed to read the log.
Means of protection will include the use of MSE + IObit Malware Fighter or combining Avast, Avira or AVG with things like Spywareblaster. Have the other scanners installed and available.