What do the following programs have in common?
Personal Security, Cyber Security, Braviax, Alpha Antivirus, GreenAV, Windows Protection Suite, Total Security 2009, Windows System Suite, Personal Antivirus, Anti-Virus-1, Spyware Guard 2008, System Guard 2009, Antivirus 2009, System Security, Antivirus 2010, Antivirus Pro 2009, Antivirus 360, MS Antispyware 2009, Malware Doctor, AntivirusBEST, System Security 2009, Antivirus System Pro, WinPC Defender, Navashield, Thinkpoint...and others?
These are all programs that try to convince you that your system is infected when it is not. It is the infection! It tries to blackmail you into paying for the full version of their scanner to supposedly get rid of all the infections that it finds. When this happens, your only solution is to get rid of any and all fake anti-virus programs.
Start up the computer in Safe Mode with Networking. Restart your computer and keep pressing the F8 key on your keyboard. It's a bit tricky, but when done right, you will be taken to a screen that has a menu with a number of options like safe mode, safe mode with networking, safe mode command prompt, and so on. Safe mode with networking gives you internet access in safe mode, comes in handy for updating anti-virus and anti-malware programs.
When presented with the login screen, choose the Administrator account. An info box will pop up eventually giving you the option to continue using safe mode or use system restore. Click yes to continue in safe mode. Clicking No will start up the system restore wizard that will allow you to reset your computer to an earlier point but it to may be infected. When ready....
Reset Internet Explorer - works only with version 7 or higher: Open up Internet Explorer, click on Tools then Internet Options. When the Internet Options box appears, click the Advanced tab. Under Reset Internet Explorer settings, click Reset. A box opens up - Then click Reset again. When Internet Explorer finishes resetting the settings, click Close then close again. Restart Internet Explorer. Then ....
Download these 5 programs. You might want to have them burned on CD and just copy them over in safe mode. Kaspersky Lab UK :: Antivirus technical support home: https://www.kaspersky.co.uk/downloads/thank-you/free-virus-removal-tool (recommended) Computer Virus Attacks, Information, News, Security, Detection and Removal | McAfee: http://home.mcafee.com/virusinfo/virus-removal-tools?ctst=1 AVG Free | Virus Removal Tools | Free Download | UK: http://free.avg.com/gb-en/virus-removal Download Free Trial Business Antivirus Software | Bitdefender: http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/ Malwarebytes Antimalware: http://www.malwarebytes.org/
Before doing any scan, delete all Temp files, which are older than one week and all files in the windows cache. You can use a program called CCleaner (CCleaner Free) to do this from http://www.piriform.com/ccleaner/download
Note: You may purchase the CCleaner Home or the CCleaner Business Edition. Or you can just click on Start then run and type in cleanmgr - in Vista, just click on Start then type cleanmgr in the search menu. This will start Windows built in disk cleaner. Check all options except to compress old files. Then click on OK.
Use “RemoveFakeAntivirus” first. Just open the program and click on Start. After it's finished it will request you to restart. Don't! Not Yet!
Then Install, Update and Run Malwarebytes. Do a Full scan rather than a quick one. It will do update by default.
Take notice of the name of the fake program and do some research online to find out make sure all associated files are removed.
Before starting up, one more thing: Check out what's running and starting up using a program called HijackThis - http://majorgeeks.com/download3155.html or http://free.antivirus.com/hijackthis/ HijackThis requires a bit of knowledge and understanding to use. It doesn't automatically delete anything but shows you just about everything that is running on your computer giving you the option to manually delete anything you don't want running. guide - http://www.bleepingcomputer.com/tutorials/tutorial42.html forum - http://www.bleepingcomputer.com/forums/forum22.html
Restart the computer normally and do another scan with a program called SUPERAntiSpyware. http://www.superantispyware.com/ - again update and do a deep or full scan.