Forum Moderators: phranque

Message Too Old, No Replies

Anti Malware program annoying & scaring me :-(

         

Makaveli2007

11:20 pm on Dec 15, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Since today Ive had some strange anti malware program on my PC, thats asking me to buy the full version b/c of a bunch of security threats and attacks Im supposedly receiving.

It uses the windows icon (the red, green, yellow, blue thing..).

Im not aware how it landed on my PC, because I havent really surfed any #*$! sites today, if I remember correctly LOL.

Seriously, though, Id be glad if anyone could confirm that this is some kind of scam & tell me how I can uninstall this before it messes anything up big time...;-(.

(Of course, I already googled for a solution to uninstall it, but got a bit suspicious about it ... wondering if maybe the same people who created this app have some pages on "uninstalling" it high in the SERPs (they suggested an automatic way - downloading another program...and a manual route - checked out the manual route which asked me to stop a process after ctrl+alt+del, that isnt running on my PC....so I thought Id better ask on here instead of relying on information I find in the SERPs)

THANKS!

icedowl

2:41 am on Dec 16, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



If you did not intentionally download this program, and it sounds as if you did not, I'd feel safe to assume it is a scam.

The first step that I would take would be to do a full system scan with a reputable anti-virus package, then another scan with a reputable anti-spyware package. One or both ought to flag or quarantine any malware found on your system.

A few months ago I had to clean up a computer belonging to a friend. She had somehow gotten something similar or maybe even the same program that you write about. I spent hours eradicating the malware from her machine, going into every nook and cranny and removing all traces of it. It was much more than a simple uninstall procedure, the registry had to be edited as well as a few more locations. I did completely document the steps I took online, but I can't and won't drop the URL here.

Good luck with it.

jdMorgan

5:14 am on Dec 16, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Download and run MalwareBytes' Anti-Malware as your first option. It nukes most of these scam-ware programs.

Do be sure to run its updater after installing it. (This applies to all installables below as well.)

If that doesn't work, there are literally dozens of anti-malware scanners --downloadable programs and on-line scanners-- that you can run for free. Start with the major antivirus and security providers.

Here's a short list of freebies you can run:

* Malwarebytes' Anti-Malware (download)
* ESET Online Scanner
* BitDefender Online Scanner
* Trend Micro Housecall
* Kaspersky Online Scanner from Kaspersky Lab
* Ewido Anti-Malware Scanners from Ewido Networks
* McAfee FreeScan
* F-Secure Online Virus Scanner (Internet Explorer only)
* Windows Live OneCare safety scanner from Microsoft (Internet Explorer only)
* Norton Security Scan from Norton/Symantec (download)
* Ad-Aware from Lavasoft (download)
* SpyBot Search and Destroy from SaferNetworking.org (download)
* Super AntiSypware (download)
* Spyware Blaster (download)
* SpySweeper (download)

Be very careful with any of these whose websites you can't recognize by sight... There are plenty of bad guys spoofing these tools' sites, so make sure you're clicking through to the real provider's site!

If your malware stops you from downloading these or accessing the on-line scanners, then download the installable ones on a different computer and write them to a flash drive. Re-boot your computer in Safe Mode, and install and run them that way.

You may need to run several of these to get rid of *all* of the problems -- both visible and invisible.

If this takes more than a few hours to clean up, consider doing a re-install of the OS.

Jim

SteveWh

10:59 am on Dec 17, 2009 (gmt 0)

10+ Year Member



In addition to the great responses you've gotten so far, these fake anti-malware programs are called "rogue" antivirus/antispyware programs, so if you need more info, those are the terms for a web search. If you add to your search the name of the one you got infected by, you might even find the experiences of others infected by the same one, and what they found to be effective at removal.

The installers for them are often part of malware packages downloaded to your computer when you visit a site that's been hacked. That is, it didn't necessarily come from a site with malicious intent.

Your first line of defense against these installers is to browse unfamiliar sites with JavaScript turned off in your browser. In IE, the setting is called "Active Scripting" in the Internet Zone security settings. In Firefox, disallowing JavaScript is in your preferences settings, but the better way is to install and use the NoScript plug-in. In the NoScript settings, also prohibit iframes and all the other types of content that are listed with checkboxes next to them, for Untrusted sites and sites that you haven't specifically allowed.

The next line of defense is to always be using an up to date (*real*) antivirus program that has real-time protection, scans files as they are saved to disk, not just if you launch a manual scan.

Makaveli2007

12:43 am on Dec 19, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Thanks for the replies everyone...im in exam phase (college) and cramming so i hadnt time to do much about it (i hope if the pc is turned off the whole time, much cant go wrong during that exam time..).

Ive already used the malwarebytes thing..and the program isnt annoying me anymore (its gone).

However, I guess I should do a bit more than that as soon as I have time.

As for antivirus programs, is there anything wrong with avast (if Im not allowed to mention the brand name - sorry, will und erstand if its removed of course)? I used to have a paid for antivirus, but that messed my PC up more than it helped it (lol) and some friends (who i would consider computer savvy) suggested to me that the program i mentioned above is just as good as the paid-for antivirus software out there. - Were they wrong maybe?

Real-time protection with antivirus is something i have to look into i guess!

Is using windows firewall a bad idea (as its perhaps the most common target for (evil;)) hackers and the like, as everyone runs it)?

thanks!

SteveWh

3:20 pm on Dec 19, 2009 (gmt 0)

10+ Year Member



I encourage real-time scanning because a virus can download, do damage, and delete itself. Then you do a manual scan and find no problems. Best to catch it immediately.

I don't consider Windows Firewall bad, and it's way better than none. Its only weakness is that it's one-way only. It disallows unknown incoming connections, which is the most important thing, but it doesn't have a way to by default disallow unauthorized outgoing connections. If you get a virus, it may "phone home" and transfer data to a remote location after it's gotten itself set up. Windows Firewall won't notice that, while a bidirectional firewall will either block the outgoing traffic or warn you about it.

bill

3:57 am on Dec 21, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I don't consider Windows Firewall bad, and it's way better than none. Its only weakness is that it's one-way only. It disallows unknown incoming connections, which is the most important thing, but it doesn't have a way to by default disallow unauthorized outgoing connections.

That's true of XP, but since Vista the Windows Firewall has had outbound packet filtering that is configurable via the management console.

SteveWh

4:22 pm on Dec 21, 2009 (gmt 0)

10+ Year Member



since Vista...

Thanks. I have a tendency to forget that Vista and 7 exist except for the moments when I'm reading something about them. Been using XP forever.

Brett_Tabke

11:03 pm on Dec 27, 2009 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I would also suggest installing microsoft security essentials (free). It has been getting great reviews for finding stuff other anti-viral programs are not finding.