Fake anti-virus starts "scanning" but reboots PC

fANAT1C · 13 Aug 2011

Hey guys

I was playing League of Legends today when my laptop all of a sudden shutted down and rebooten itself. No big deal I was saying to myself, there was no BSOD or anything else to notify except from the suspect "self reboot".

Well now, about 4 hours later I was still playing League of Legends (probably I'm an addict) when all of a sudden the game shutted down. A fake virus scanner started to "scan" files on my laptop saying that every file was infected. When I tried to download AVG Free I couldn't because the virus shuts down everything I open (even My Computer). After closing every single program loaded at that time, the virus rebooted my laptop and there was a BSOD.

Whatever I do to try installing an anti-virus gets blocked by the virus. My laptop reboots time after time. Is there any way to install a virusscanner as I am not really in the mood to lose about 750 gigabytes of data (better backup next time

)? I tried installing AVG Free in safe-mode but AVG Free tells me I can't installed the scanner through safe-mode.

Please help me, I'll add to your reputation if you succeed to help

EDIT: remove this post please, I'm just going to format my computer.

Thanks in advance

TheReaper · 13 Aug 2011

Try to install Malwarebytes AntiMalware free in safe mode with networking,
update it & do a full scan. It should be able to detect & remove the fake AV.

kevi3434 · 14 Aug 2011

TheReaper said:

Try to install Malwarebytes AntiMalware free in safe mode with networking,
update it & do a full scan. It should be able to detect & remove the fake AV.

He just mentioned that he can't open anything. So, obviously he won't be able to run a web browser to download that. Normally fake AVs block you internet access. They may provide a message mentioning that you PC is risk of online attacks and that it is 'protecting' you. Could possibly provide the name of the fake AV that is affecting your PC?

This may be of use after you have removed your infection.

How to create a Restore Point in Windows 7

http://www.howtogeek.com/howto/3195/...-in-windows-7/

A Guy · 14 Aug 2011

He also said he was going to reformat :) He mentioned trying to install AVG in safe mode, so looks like he has access to downloads somehow. If the OP returns, and hasn't formatted, he'd be well served to burn an AV rescue CD. If unable to do so, he might be able to download and run the portable SuperAntispyware as it uses a generic name ending in .com to fool the malware.

SUPERAntiSpyware.com - SUPERAntiSpyware Portable Scanner

A Guy

fANAT1C · 09 Sep 2011

Sorry for the late reaction, I try to be active here but sometimes I forget visiting the forums daily though I am online every day.

Anyway, I just reformatted my laptop. Sorry for those people that simply can not format their hard disk, due to the important data that is stored on it. Formatting was for me the best option as there was alot of crap (ghost programs, missing registry keys, too much software) on my system environment.

I'm trying to remember the name of the fake virus scanner but I can not seem to find it.

Layback Bear · 09 Sep 2011

This works for my security.
MSE, MAM, SAS and Windows built in firewall.
I wouldn't look for that fake anti virus, it might try to install again.
Of course the user being careful what site they go to.
Happy computing.

codyw · 11 Sep 2011

I've had my share of fake AV's on client computers. When you can't download anything normally, and you can't boot into safe mode, the next best thing is to wipe and start over. Although it's a long process and frustrating, it will get rid of all the "junk" you accumulate over the years. I am interested to know what AV you were using when you got hit with the fake av. Do you have a rescue disk by any major AV companies? I have 1 in case something happens to my laptop or client's computers...

metalmania31 · 12 Sep 2011

codyw said:

I've had my share of fake AV's on client computers. When you can't download anything normally, and you can't boot into safe mode, the next best thing is to wipe and start over. Although it's a long process and frustrating, it will get rid of all the "junk" you accumulate over the years. I am interested to know what AV you were using when you got hit with the fake av. Do you have a rescue disk by any major AV companies? I have 1 in case something happens to my laptop or client's computers...

How are you people getting these fake A/V's. If you know your own A/V you should immediately know some fake popup purporting to be A/V should be an immediate red flag. I don't remember if I ever got one, but I had to clean one off my parents PC. It was a pain in the arse to get rid of. A coworking got one on a workstation pc too and boy was he red faced. I managed to clean that out fortunately.

codyw · 13 Sep 2011

Fake AV's are pain because certain av's block executables from being ran when the system is infected and some times getting into safe mode when the computer is so severely infected can be a challenge...