Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Fake Anti-virus cant remove


28 Dec 2010   #1

Windows 7 Home Premium x64, Mac OS X 10.6.2 x64
 
 
Fake Anti-virus cant remove

My brother accidently installed a fake antivirus. It wont let him get on the internet, run basically any program (even taskmgr) or do much anything unless he "activates the antivirus" by buying it.

Iv tried running Remove Fake Antivirus 1.72, full system scans with Spy Sweeper and MSE. Nothing has worked. Any ideas?

My System SpecsSystem Spec
.

28 Dec 2010   #2

Windows 7 Home Premium 64 bit
 
 

Have you tried removing it in the safe mode or doing a system restore?
My System SpecsSystem Spec
28 Dec 2010   #3

Windows 7 Home Premium x64, Mac OS X 10.6.2 x64
 
 

Not a system restore because he doesnt have any backups.

And yes I was doing that all in safe mode.
My System SpecsSystem Spec
.


28 Dec 2010   #4

Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
 
 

Do a search for a program talked about 9 or 10 months ago in the System Security forum

It is called Rkill. It got one of the toughest, nastiest, spyware, fake virus programs I had ever seen.
My System SpecsSystem Spec
28 Dec 2010   #5

Windows 7 Home Premium x64 SP1
 
 

you can download malwarebytes and remove those rogues.
My System SpecsSystem Spec
28 Dec 2010   #6

Microsoft Community Contributor Award Recipient

Win 7 Pro 64-bit
 
 

RKill was developed by BleepingComputer.com and can be downloaded from their website:

RKill - What it does and What it Doesn't - A brief introduction to the program

It may be necessary to download from another (uninfected) computer to USB stick. Also, pay attention to the warning: Since RKill only terminates processes, after running it you should not reboot your computer as any malware processes that are set to start automatically, will just start up again. Instead, after running RKill you should scan your computer using your malware removal tool of choice.
My System SpecsSystem Spec
28 Dec 2010   #7

Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTS
 
 

Ya, run rkill and then mbam from an external usb stick. You should also like to dload the other versions of rkill such as rkill.com, rkill.scr in case if it blocks exe files. If none of the above works, try running the renamed version of rkill available at bleeping computer's site.
My System SpecsSystem Spec
28 Dec 2010   #8

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

What is the name of this fake AV? Some companies have fake AV removers specifically targeted for certain fake AV's. Try Googling the name of it +removal tool and see what you can find.

Another option is Norton Power Eraser which you can run from a USB:

http://security.symantec.com/nbrt/npe.asp?lcid=1033

Or a boot rescue disk, like AVG rescue disk. This will run at boot up before the system initializes and attempt to repair/delete the offending software

http://www.avg.com/us-en/avg-rescue-cd
My System SpecsSystem Spec
28 Dec 2010   #9

Windows 7 Home Premium x64 SP1
 
 

i forgot to add, you can also use hitman pro. if its blocking the executable, you can use breach mode on hitman pro by pressing and hold down the ctrl key while clicking hitman pro.
My System SpecsSystem Spec
28 Dec 2010   #10

Windows 7 Home Premium x64, Mac OS X 10.6.2 x64
 
 

None worked. It wont let me run them, and the recovery CD didnt help.
My System SpecsSystem Spec
Reply

 Fake Anti-virus cant remove




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:32 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33