Fake anti-virus starts "scanning" but reboots PC

fANAT1C

New member
Power User
Local time
8:04 AM
Messages
83
Location
Belgium
Hey guys

I was playing League of Legends today when my laptop all of a sudden shutted down and rebooten itself. No big deal I was saying to myself, there was no BSOD or anything else to notify except from the suspect "self reboot".

Well now, about 4 hours later I was still playing League of Legends (probably I'm an addict) when all of a sudden the game shutted down. A fake virus scanner started to "scan" files on my laptop saying that every file was infected. When I tried to download AVG Free I couldn't because the virus shuts down everything I open (even My Computer). After closing every single program loaded at that time, the virus rebooted my laptop and there was a BSOD.

Whatever I do to try installing an anti-virus gets blocked by the virus. My laptop reboots time after time. Is there any way to install a virusscanner as I am not really in the mood to lose about 750 gigabytes of data (better backup next time :()? I tried installing AVG Free in safe-mode but AVG Free tells me I can't installed the scanner through safe-mode.

Please help me, I'll add to your reputation if you succeed to help :-)

EDIT: remove this post please, I'm just going to format my computer.

Thanks in advance
 

My Computer My Computer

At a glance

Windows 7 Home Premium 64-bitIntel Core 2 Duo T6600 @2.2 GHz4GB RAM DDR3 so-DIMMNVIDIA GeForce GT 240m 1GB
Computer Manufacturer/Model Number
Acer Aspire 8735g
OS
Windows 7 Home Premium 64-bit
CPU
Intel Core 2 Duo T6600 @2.2 GHz
Motherboard
/
Memory
4GB RAM DDR3 so-DIMM
Graphics Card(s)
NVIDIA GeForce GT 240m 1GB
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
18,4 HD+ LCD
Hard Drives
2 x 500 GB @5400 RPM
PSU
/
Case
Acer Aspire 8735g (laptop)
Cooling
/
Keyboard
Logitech Media Keyboard 600
Mouse
Logitech G3
Try to install Malwarebytes AntiMalware free in safe mode with networking,
update it & do a full scan. It should be able to detect & remove the fake AV.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64Intel C2D E8400@4Ghz OC4x2GB Kingston HyperX 8500@1066MhzNvidia GTS450 OC
Computer Manufacturer/Model Number
Custom/DIY
OS
Windows 7 Ultimate x64
CPU
Intel C2D E8400@4Ghz OC
Motherboard
ASUS P5Q-E, bios 2101
Memory
4x2GB Kingston HyperX 8500@1066Mhz
Graphics Card(s)
Nvidia GTS450 OC
Sound Card
Onboard SoundMax
Monitor(s) Displays
Samsung Syncmaster 17"
Screen Resolution
1280x1024
Hard Drives
WD6402AAEX-640GB(system), WD10EALX-1TB(storage), other external disks & docking stations
PSU
Corsair TX-750 V2
Case
Custom Tower
Cooling
Air: Arctic Cooling 2xF8 & F12; Akasa AK-968, 2xAK-HD-BL
Mouse
Gigabyte M6900
Internet Speed
10M/1M
Try to install Malwarebytes AntiMalware free in safe mode with networking,
update it & do a full scan. It should be able to detect & remove the fake AV.

He just mentioned that he can't open anything. So, obviously he won't be able to run a web browser to download that. Normally fake AVs block you internet access. They may provide a message mentioning that you PC is risk of online attacks and that it is 'protecting' you. Could possibly provide the name of the fake AV that is affecting your PC?

This may be of use after you have removed your infection.

How to create a Restore Point in Windows 7

http://www.howtogeek.com/howto/3195/create-a-system-restore-point-in-windows-7/
 

My Computer My Computer

At a glance

Windows 7 Pro x64
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Pro x64
He also said he was going to reformat :) He mentioned trying to install AVG in safe mode, so looks like he has access to downloads somehow. If the OP returns, and hasn't formatted, he'd be well served to burn an AV rescue CD. If unable to do so, he might be able to download and run the portable SuperAntispyware as it uses a generic name ending in .com to fool the malware.

SUPERAntiSpyware.com - SUPERAntiSpyware Portable Scanner

A Guy
 

My Computer My Computer

At a glance

Windows 10 Home x64INTEL Core i5-750 Quad-Core 3.37GHzHyperX Fury Black Series 8GB (2 x 4GB) 1866MhzEVGA GeForce GTX 750 Superclocked 1GB 128-Bit...
Computer type
PC/Desktop
OS
Windows 10 Home x64
CPU
INTEL Core i5-750 Quad-Core 3.37GHz
Motherboard
ASUS P7P55D
Memory
HyperX Fury Black Series 8GB (2 x 4GB) 1866Mhz
Graphics Card(s)
EVGA GeForce GTX 750 Superclocked 1GB 128-Bit GDDR5
Monitor(s) Displays
LG 32MA68HY 32" IPS
Screen Resolution
1920 x 1080
Hard Drives
Samsung 840 Evo 120GB, SEAGATE 500GB Barracuda® 7200.12, SATA 3 Gb/s, 7200 RPM, 16MB cache
PSU
ANTEC TruePower New TP-550, 80 PLUS, 550W
Case
ANTEC Three Hundred Illusion
Cooling
COOLER MASTER Hyper 212 Plus, 4 x 120mm 1 x 140mm Noctua's
Internet Speed
85 + Mbps
Antivirus
Avast
Browser
Vivaldi
Sorry for the late reaction, I try to be active here but sometimes I forget visiting the forums daily though I am online every day.

Anyway, I just reformatted my laptop. Sorry for those people that simply can not format their hard disk, due to the important data that is stored on it. Formatting was for me the best option as there was alot of crap (ghost programs, missing registry keys, too much software) on my system environment.

I'm trying to remember the name of the fake virus scanner but I can not seem to find it.
 

My Computer My Computer

At a glance

Windows 7 Home Premium 64-bitIntel Core 2 Duo T6600 @2.2 GHz4GB RAM DDR3 so-DIMMNVIDIA GeForce GT 240m 1GB
Computer Manufacturer/Model Number
Acer Aspire 8735g
OS
Windows 7 Home Premium 64-bit
CPU
Intel Core 2 Duo T6600 @2.2 GHz
Motherboard
/
Memory
4GB RAM DDR3 so-DIMM
Graphics Card(s)
NVIDIA GeForce GT 240m 1GB
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
18,4 HD+ LCD
Hard Drives
2 x 500 GB @5400 RPM
PSU
/
Case
Acer Aspire 8735g (laptop)
Cooling
/
Keyboard
Logitech Media Keyboard 600
Mouse
Logitech G3
This works for my security.
MSE, MAM, SAS and Windows built in firewall.
I wouldn't look for that fake anti virus, it might try to install again.
Of course the user being careful what site they go to.
Happy computing.
 

My Computer My Computer

At a glance

Windows 10 Pro. 64/ version 1709 Windows 7 Pr...Intel i7-6800K @ 4.3Corsair Platinum 16 gig @2400EVGA GTX 1070 OC
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home made Desktop
OS
Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
CPU
Intel i7-6800K @ 4.3
Motherboard
ASUS X-99 Deluxe II
Memory
Corsair Platinum 16 gig @2400
Graphics Card(s)
EVGA GTX 1070 OC
Monitor(s) Displays
Asus 27" LED LCD/VE278Q
Screen Resolution
1920-1080 or 1280-720 HDMI
Hard Drives
INTEL SSD 730-240 Gb Sata 3.0/
PSU
EVGA Platium 1200W
Case
Phanteks Luxe Tempered Glass 8 fans/ one radiator
Cooling
XSPC/ Water Cooled CPU
Keyboard
Das 4 Professional
Mouse
Logitech M705/MX Anywhere 2-S
Internet Speed
100 mbits
Antivirus
Microsoft Security Essentials/ Malwarebytes Premium 3.0/ SAS
Browser
I.E. 11 default/Firefox/ ISP Time Warner Cable/Spectrum
Other Info
LG BluRay Burner/
Sound system-KLipsch-THX/
Icy Dock ssd Hot Swap bays.
I've had my share of fake AV's on client computers. When you can't download anything normally, and you can't boot into safe mode, the next best thing is to wipe and start over. Although it's a long process and frustrating, it will get rid of all the "junk" you accumulate over the years. I am interested to know what AV you were using when you got hit with the fake av. Do you have a rescue disk by any major AV companies? I have 1 in case something happens to my laptop or client's computers...
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 with SP1Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz8 GBIntel(R) HD Graphics Family, NVIDIA GeForce
Computer Manufacturer/Model Number
ASUSTeK Computer Inc./Q550LF/Laptop
OS
Windows 7 Ultimate x64 with SP1
CPU
Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz
Motherboard
ASUSTeK Computer Inc.
Memory
8 GB
Graphics Card(s)
Intel(R) HD Graphics Family, NVIDIA GeForce
Hard Drives
Hitachi HTS547575A9E384
Internet Speed
XFINITY
Antivirus
Trend Micro
I've had my share of fake AV's on client computers. When you can't download anything normally, and you can't boot into safe mode, the next best thing is to wipe and start over. Although it's a long process and frustrating, it will get rid of all the "junk" you accumulate over the years. I am interested to know what AV you were using when you got hit with the fake av. Do you have a rescue disk by any major AV companies? I have 1 in case something happens to my laptop or client's computers...

How are you people getting these fake A/V's. If you know your own A/V you should immediately know some fake popup purporting to be A/V should be an immediate red flag. I don't remember if I ever got one, but I had to clean one off my parents PC. It was a pain in the arse to get rid of. A coworking got one on a workstation pc too and boy was he red faced. I managed to clean that out fortunately.
 

My Computer My Computer

At a glance

Windows 7 Pro 64bit build 7601 SP1Intel Core I5 3570K 3.4Ghz w/ Zalman CNPS9900...G.Skill F3-12800CL9D-8GbXL ; 4Gx2EVGA Geforce GTX 770 Superclocked
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Pro 64bit build 7601 SP1
CPU
Intel Core I5 3570K 3.4Ghz w/ Zalman CNPS9900NT RT
Motherboard
MSI Z77A-G45 Gaming
Memory
G.Skill F3-12800CL9D-8GbXL ; 4Gx2
Graphics Card(s)
EVGA Geforce GTX 770 Superclocked
Sound Card
Creative Sound Blaster Z
Monitor(s) Displays
Dual ViewSonic VX2770Smh-LED Black 27"IPS-Panel
Screen Resolution
1920x1080
Hard Drives
Kingston Hyper X 240GB SSD Win8 Pro 64bit 6GB/s Sata III
Intel 335 Series SSD 240GB Win8 Storage 6GB/s Sata III
Intel 320 Series SSD 600GB Storage 3GB/s Sata II
Western Digital Scorpio Black 1TB - Docked via Esata
PSU
Coolermaster GX 750W
Case
Corsair Vengence C70
Cooling
Coolermaster 120mm and Enermax 140mm
Keyboard
Corsair Vengence K70
Mouse
Logitech G500
Internet Speed
22mbps+
Browser
Firefox, Chrome, IE
Other Info
Swan M50W 2.1 speakers
APC UPS
Thermaltake BlacX HDD Dock
Samsung BD Optical Drive
Netgear WNDR4500
Fake AV's are pain because certain av's block executables from being ran when the system is infected and some times getting into safe mode when the computer is so severely infected can be a challenge...
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 with SP1Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz8 GBIntel(R) HD Graphics Family, NVIDIA GeForce
Computer Manufacturer/Model Number
ASUSTeK Computer Inc./Q550LF/Laptop
OS
Windows 7 Ultimate x64 with SP1
CPU
Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz
Motherboard
ASUSTeK Computer Inc.
Memory
8 GB
Graphics Card(s)
Intel(R) HD Graphics Family, NVIDIA GeForce
Hard Drives
Hitachi HTS547575A9E384
Internet Speed
XFINITY
Antivirus
Trend Micro
Back
Top