Wicked Fake AV Progam out there.

[ZZman]

I had 2 friends computers hit with a fake AV program. I found out after removal that it changed the browser LAN connection setting from Auto to Proxy server so we could not get on the net to download a Anti- Malware program.

I put Malwarebytes Anti-Malware on a flash key and installed and ran it in safe mode. It kept saying the Malwarebytes files were infected and did I want to activate the fake AV program. I clicked no. Malwarebytes ran and found the infections and killed them.

I then had to go into the browser tools area and connection tab and reset it back to Auto.

 

[flacoman]

sounds like a job for combofix

 

[gfh77665]

Thanks for the heads up, ZZ!

 

[daves87rs]

Uh oh...sounds nasty.

 

[wavinwayne]

What is the name of the fake AV, and where were your friends browsing when their computers became infected? Just want to stay safe..

 

[SrDriver]

Has hit several people here in this area too. Average cost to have a computer company to remove it here runs around $75.00 or more.

I am a linux user and got the message you Windows Computer has been infected click here.

This is one of the ones going around that even though you get a warning you go ahead and click to install!

 

[hate2work]

Originally Posted By: wavinwayne
What is the name of the fake AV, and where were your friends browsing when their computers became infected? Just want to stay safe..


+1

 

[CivicFan]

I got something similar a few months back . Had to do a fresh Windows install.

 

[Drew99GT]

www.sandboxie.com

Just use it fellas! It slows browsing a tad, it's a bit cumbersome to use at first, but once you get used to using it, you won't know it's there, and all this fake AV crud and other malware will be a thing of the past!

 

[scurvy]

Originally Posted By: Drew99GT
It slows browsing a tad, it's a bit cumbersome to use at first, but once you get used to using it, you won't know it's there, and all this fake AV crud and other malware will be a thing of the past!


Here, here & here are some alternatives. All of them are free (save your €26 and spend it on oil) and will actually make your computer speed up for web browsing and nearly all other tasks.

 

[Buffman]

gotta love these. Some of them have been known to edit the Host file to hide the redirects. There's an EXE registry mod that you can download that if infected can edit the registry so it will let you install malwarebytes..

Some of the good ones replace .sys files, then they're a real bear to remove.

 

[DragRace]

Bring it on!

I play with malware

 

[ZZman]

Sorry guys but I don't remember the name of it. Put a fake shield icon in the lower right corner of the screen on the taskbar.

It did block me from downloading any programs from the net to remove it by changing the connection settings in I.E to a proxy.

Once I got Malwarebytes installed from a flash key it removed it no problem.

At least one guy was probably surfing porn. The other I have no idea.

 

[Nick R]

My dad actually had this. Took him several hours to remove it.

 

[SLCraig]

I've cleaned that one a few times... Can't recall the name either. Annoying!!