how to remove fake antivirus program from my computer?

November 8, 2013 at 02:29:51
Specs: Windows XP
my computer is infected with something dirty. There are always a Spy Search program comes out to scan my computer when I turn on my PC and shows many annoying popup on my computer screen which tell me that my computer is in bad condition. I want to remove it, but I don't know how to do. who can help me. Thanks a lot.

See More: how to remove fake antivirus program from my computer?

Report •

November 8, 2013 at 03:18:36
Hi, there. I had the same issue couple of years ago. Two options:

1) Click on Start and on the search box write "msconfig" (without the quotes) and hit Enter on the keyboard. A window will appear. Go to the 4th tab (startup) and search there for this suspicious software that pops-up every time windows start. Uncheck the box and look where the file is located on your HD so you can find it and delete it.

2) Use utilities software like TuneUp Utilities where you can easily turn autostart programs on and off.

hope that this is helpful.

P.S.: I assumed that you are using Win7. But the same applies also to Vista and XP

message edited by plambient

Report •

November 8, 2013 at 03:56:52
1: Download & run Unhide
To run Unhide, simply download it to your desktop and then double-click on the Unhide icon. The program will open a black box and start making the files on your fixed disks visible again. Please note, that this program will not unhide removable drives like flash cards and usb drives as the FakeHDD rogues do not target these types of drives. Once it has finished, the program will display a Windows alert stating that your files have been restored. You should then reboot your computer for all of the settings to go into effect.
Copy & Paste the contents of the log. Let me know if it doesn't produce a log please.

2: Reboot

3: Run RogueKiller
User guide
Official tutorial
If RougeKiller won't run, open IE & turn off SmartScreen Filter.
Download & SAVE to your Desktop.
Quit all programs that you may have started.
Shutdown your antivirus to avoid any conflicts.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7/8, right-click and select "Run as Administrator to start"
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on "Scan" button
Wait until the Status box shows "Scan Finished"
click on "delete"
Wait until the Status box shows "Deleting Finished"
Click on "Report" and Copy & Paste the content of the Notepad into your next reply.
The log should be found in RKreport[1].txt on your Desktop
Exit/Close RogueKiller.
When completed make sure to re-enable your antivirus.

Report •

November 9, 2013 at 08:03:21
Hi Cora,
I have been doing virus removal for many years now and find the following works quite well at removing fake AV's quite easily:
1- rkill.exe
2- tdss killer
3- malwarebytes

Run them in the EXACT order listed and do NOT reboot until after the last scan. If this doesn't rectify the problem, then do the SAME....ONLY this time in safe mode. That should clean up the problem for you and they are all free utilities...good luck.

Here is a great way to prevent activating a fake AV:

HELP in posting on plus free progs and instructions

Report •
Related Solutions

Ask Question