| Windows 7: Fake program Anti-malware |
01 Mar 2011
|
#1 | | |
Fake program Anti-malware Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.
I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide) | My System Specs |
| |
01 Mar 2011
|
#2 | | Win7 Ultimate SP1 x64 / Windows 8 Pro / Android Mauritius |

Quote: Originally Posted by reborn7778 Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.
I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide) Run Malwarebytes in safe mode with networking | My System Specs | | System Manufacturer/Model Number Custom Build OS Win7 Ultimate SP1 x64 / Windows 8 Pro / Android CPU Intel Core 2 Quad Q8200 OC'd 3.08GHz Motherboard Asus Rampage formula LGA775 Memory 8GB DDR2 900Mhz Graphics Card Zotac GTX 460OC 2GB GDDR5/Asus EN9600GT 1GB DDR3 PhyX Sound Card Supreme FX2 Monitor(s) Displays AOC 22' Screen Resolution 1680x1050 Keyboard Prolink keyboard Mouse Prolink optical mouse PSU Cooler Master GX 650W Cooling Cooler Master V6 + 3X fans Hard Drives 3X500GB hitachi, 2TB internal, 500GB Seagate FreeAgent, 640GB Samsung Internet Speed 1MiB/s Other Info 5.1 System + 2.1 System |
01 Mar 2011
|
#3 | | |

Quote: Originally Posted by yowanvista 
Quote: Originally Posted by reborn7778 Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.
I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide) Run Malwarebytes in safe mode with networking I have a tried that, it is don't work. | My System Specs | | |
01 Mar 2011
|
#4 | | Win7 Ultimate SP1 x64 / Windows 8 Pro / Android Mauritius |

Quote: Originally Posted by reborn7778 
Quote: Originally Posted by yowanvista 
Quote: Originally Posted by reborn7778 Sady news, i found a fake program called AntiMalware GO from my old computer windows XP, but i was gave to my little sister, so i have tried remove from program Malwarebytes Anti-Malware, but they don't let me open it, it is from fake antimalware, how are they build that fake. Geez. so my old computer is very old, and seem weak, since 6 years, from my my birthday, my dad brought for me. it is completed destroy. i hate fake program.
I have a tried way other, but found this link, still don't work, Remove AntiMalware Go (Uninstall Guide) Run Malwarebytes in safe mode with networking I have a tried that, it is don't work. Remove the Fake AV using a Rescue Disk Download Kaspersky Rescue Disk 10 http://www.raymond.cc/blog/archives/...t-rescue-disk/ | My System Specs | | System Manufacturer/Model Number Custom Build OS Win7 Ultimate SP1 x64 / Windows 8 Pro / Android CPU Intel Core 2 Quad Q8200 OC'd 3.08GHz Motherboard Asus Rampage formula LGA775 Memory 8GB DDR2 900Mhz Graphics Card Zotac GTX 460OC 2GB GDDR5/Asus EN9600GT 1GB DDR3 PhyX Sound Card Supreme FX2 Monitor(s) Displays AOC 22' Screen Resolution 1680x1050 Keyboard Prolink keyboard Mouse Prolink optical mouse PSU Cooler Master GX 650W Cooling Cooler Master V6 + 3X fans Hard Drives 3X500GB hitachi, 2TB internal, 500GB Seagate FreeAgent, 640GB Samsung Internet Speed 1MiB/s Other Info 5.1 System + 2.1 System |
01 Mar 2011
|
#5 | | Windows 7 Ultimate SP1 (x64) South Australia |
If the links that yowanvista gave you don't work, you could also try tips from this thread: Here’s a Super Simple Trick to Defeating Fake Anti-Virus Malware
Regards,
Golden | My System Specs | | Computer type PC/Desktop System Manufacturer/Model Number Golden Mk. I.3 OS Windows 7 Ultimate SP1 (x64) CPU Intel i7 860 @ 2.80 GHz Motherboard Gigabyte P55A-UD3R Rev.1. Award BIOS F13 Memory 16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24) Graphics Card EVGA NVidia GTX 560 1024MB Sound Card Realtek Integrated Monitor(s) Displays Dual Samsung SyncMaster 2494HS Screen Resolution 1920*1080 and 1920*1080 Keyboard Logitech G110 Mouse Logitech MX518 PSU Thermaltake ToughPower QFan 750W Case Thermaltake Element S VK60001W2Z Cooling Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans Hard Drives 1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
3*Samsung F1 SpinPoint 1TB in RAID5;
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0 Internet Speed Not fast enough!!! Antivirus MSE and Malwarebytes Pro Browser Chrome Version 25 Other Info Laptop: ASUS X54C, Intel Core i3-2330M @ 2.0Ghz, 4GB RAM, Intel HD on-board graphics, Windows 7 Professional SP1 (x64), LinuxMint 14 (x64), PepperMint 3 (x86) |
01 Mar 2011
|
#6 | | Windows 7 Ultimate N 64-bit Merseyside |
u do know malwarebytes has an assassin tool and removes on restart? never had it fail on me. | My System Specs | | System Manufacturer/Model Number Windows 7 Ultimate 64-bit OS Windows 7 Ultimate N 64-bit CPU AMD Black Edition - AMD Phenom X4 2.5 GHz Processor Motherboard Bio Star Memory 8GB DDR2 800MHZ BRANDED Graphics Card Palti NVIDIA GeForce GTX 460 Monitor(s) Displays 3D 23.6" & 22" Screen Resolution 1920x1080@120Hz PSU OCZ 600W StealthXStream PSU, PowerWhisper, Active PFC Hard Drives 313GB SAMSUNG SAMSUNG HD321KJ Internet Speed 22793 |
01 Mar 2011
|
#7 | | Windows 7 Ultimate x64 Milton Keynes, United Kingdom |
There's a simple way to remove Fake AV programs but it takes some timing
Here's a simple (or not) guide for you...
1, Turn off then boot the machine
2, The instant you see the desktop appear, right-click the Taskbar and select Task Manager  Note It is imperative that you're quick, most (if not all) Fake AV will disable the Task Manager as soon as it's loaded into memory
3, In Task Manager, processes tab, right-click any suspect entry and select 'End Process Tree'  Tip The processes to End will no doubt be associated with 'Antimalware Go'
Now that the process has been killed you will need to get yourself back online...
Open up Control Panel > Network and Internet > Internet Options and select the ' Connections' tab, then click ' Lan Settings' as indicated below
Make sure that the ' Use a proxy server for your LAN' is unchecked as indicated below
You should then be able to systematically and manually remove the files associated with Antimalware Go. These will likely be... File Locations
%userprofile%\Appdata\Temp
Program files\Antimalware Go Registry Locations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0?  Note [random] means that it'll no doubt be a completely random selection of letters & numbers
After all this, download MalwareBytes and run a full system scan then reboot your machine.
Hope this helps.
OS | My System Specs | | System Manufacturer/Model Number Compaq Desktop OS Windows 7 Ultimate x64 CPU AMD Sempron Dual Core Memory 3GB Graphics Card NVIDIA GeForce 6150SE nForce 430 Screen Resolution 1024x768 Hard Drives 150GB Sata Fake program Anti-malware problems? All times are GMT -5. The time now is 07:48 PM. | |