Dealing with a fake antivirus program

May 28, 2010

Dealing with a fake antivirus program

Are you getting pop-ups that won’t go away, asking you to buy their product, saying that your computer is unprotected and infected with numerous malicious files? This is most likely a  fake antivirus program. It goes by numerous names. Whatever you do, do not send them money! A legitimate program would not pester you so much to purchase itself.

There are a few things you may be able to do to rid yourself of this nuisance.

1. Reboot the computer and before Windows has a chance to fully load up, press ctrl alt del to get the Windows Task Manager. Once there, select the applications or processes tab to locate the offending program and then end it. If you are successful, the pop-up window will disappear. If you are in the Processes list, be careful what process you choose to end. Typically the filename should give a hint as to its legitimacy.

2. If you can get on the internet, download and install Malwarebytes. Run it, and remove everything it finds. You may have to do this in safe mode (with networking, as this will allow you to go on the internet – high speed of course. Sorry all you dial-up folks.) (To get into safe mode, reboot the computer and keep hitting F8 until you get the option to select safe mode.) If you can’t access the internet from your computer then you will have to access it from another computer and then download Malwarebytes and Avira onto your usb flash drive.

3. Download and install Avira antivirus. Run it and remove everything it finds.

4. Go to onecare.live.com and run the online safety scanner from Microsoft. Let it remove everything nasty that it finds.

This sequence of steps should get your computer running normally again. Although both Malwarebytes and Avira have free versions, their paid versions provide better active protection and are well worth the money.

Comments are closed.