Fake virus scan (Win7 Defender)

Page 1 of 2 12 LastLast

  1. Posts : 19
    indows 7 home permium 64 bit
       #1

    Fake virus scan (Win7 Defender)


    All of a sudden I got a security system alert saying I had problems. It is Win7 Defender and they won't let me do anything with the file extension of .exe. I went to safe mode and can't start any programs at all. I know that Malwarebytes can remove it but I can't download Malwarebytes because it has an .exe file extension. All virus/spyware programs, or any other for that matter, can't be started. As soon as this hoax sees the .exe file, it brings itself up. Anybody got any good ideas? Thankfully I have a separate computer to send this from.
      My Computer


  2. Posts : 9,606
    Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
       #2

    Welcome dach162,

    I remember using a program called Rkill several years ago to stop this malware that locks up the .exe files

    RKill - CNET Download.com
      My Computer


  3. Posts : 19
    indows 7 home permium 64 bit
    Thread Starter
       #3

    I have that but since it has a .exe, I can't download it to the computer. (I have in on a flash drive)
      My Computer


  4. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #4

    This might help. Download using a clean computer.
    Windows Defender Offline

    Sometimes renaming things like Malwarebytes will get past the infection.
    Malwarbytes #21.exe
    Also try using scans from Safe Mode and Rkill from Safe Mode.
      My Computer


  5. Posts : 9,606
    Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
       #5

    You can also download it as a .com file to USB & then transfer to the infected computer

    1. Do you want to run or save rkill.com (1.59 MB) from download.bleepingcomputer.com?
    2. download.bleepingcomputer.com/grinler/​rkill.com
      My Computer


  6. Posts : 19
    indows 7 home permium 64 bit
    Thread Starter
       #6

    If this didn't have the .exe file it might work but anything (and I mean anything) with a .exe won't work. I can't pick up IE or any other program that has an executable file.
      My Computer


  7. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #7

    I agree with Doc Rkill has always worked for me.
    Please read this.
    RKill - What it does and What it Doesn't - A brief introduction to the program
    Don't keep telling us you can't, Try
    Read the Defender off line.
      My Computer


  8. Posts : 9,606
    Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
       #8

    Here is an old post from SF, but good info here

    Rogue Virus Removal Tool
      My Computer


  9. Posts : 19
    indows 7 home permium 64 bit
    Thread Starter
       #9

    Thanks for all the quick information. The best answer was changing the .exe to .com and trying that. When I did, it allowed me to install malwarebytes and after scanning with that, it removed all of this foolish fake program. The key here was .com. This win7 defender takes over whenever a .exe is called for. Thanks again.
      My Computer


  10. Posts : 9,606
    Win7 Enterprise, Win7 x86 (Ult 7600), Win7 x64 Ult 7600, TechNet RTM on AMD x64 (2.8Ghz)
       #10

    Congrats, Glad we could help
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:41.
Find Us