Fake program Anti-malware

reborn7778 · 01 Mar 2011

Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.

I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide)

yowanvista · 01 Mar 2011

reborn7778 said:

Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.

I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide)

Run Malwarebytes in safe mode with networking

reborn7778 · 01 Mar 2011

yowanvista said:

reborn7778 said:

Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.

I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide)

Run Malwarebytes in safe mode with networking

I have a tried that, it is don't work.

yowanvista · 01 Mar 2011

reborn7778 said:

yowanvista said:

reborn7778 said:

Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.

I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide)

Run Malwarebytes in safe mode with networking

I have a tried that, it is don't work.

Remove the Fake AV using a Rescue Disk
Download Kaspersky Rescue Disk 10

http://www.raymond.cc/blog/archives/...t-rescue-disk/

Golden · 01 Mar 2011

If the links that yowanvista gave you don't work, you could also try tips from this thread:

https://www.sevenforums.com/security-...s-malware.html

Regards,
Golden

richyrichuk · 01 Mar 2011

u do know malwarebytes has an assassin tool and removes on restart? never had it fail on me.

Orbital Shark · 01 Mar 2011

There's a simple way to remove Fake AV programs but it takes some timing

Here's a simple (or not) guide for you...

1, Turn off then boot the machine
2, The instant you see the desktop appear, right-click the Taskbar and select Task Manager

Note

It is imperative that you're quick, most (if not all) Fake AV will disable the Task Manager as soon as it's loaded into memory

3, In Task Manager, processes tab, right-click any suspect entry and select 'End Process Tree'

Tip

The processes to End will no doubt be associated with 'Antimalware Go'

Now that the process has been killed you will need to get yourself back online...

Open up Control Panel > Network and Internet > Internet Options and select the 'Connections' tab, then click 'Lan Settings' as indicated below

Fake program Anti-malware-ie-connections.png

Make sure that the 'Use a proxy server for your LAN' is unchecked as indicated below

Fake program Anti-malware-ie-lan-settings.png

You should then be able to systematically and manually remove the files associated with Antimalware Go. These will likely be...

File Locations
%userprofile%\Appdata\Temp
Program files\Antimalware Go

Registry Locations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0?

Note

[random] means that it'll no doubt be a completely random selection of letters & numbers

After all this, download MalwareBytes and run a full system scan then reboot your machine.

Hope this helps.

OS