The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.
Fuck you, Antivirus System Pro (PROBLEM SOLVED)
MinionOfCthulhu
Registered User regular
Registered User regular
I need help getting rid of this evil fake virus scanner. I'm not even sure how I picked it up, but it pops up and annoys me and is fucking with Internet Explorer. I don't use IE, but Steam and League of Legends use it, so the Store/Community tabs in Steam greet me with:
And League of Legends won't let me connect because it too thinks I'm not on the internet.
I've used this program found here called rkill to stop it from running but the next step (using Malawarebyte's Anti-Malware) doesn't work. I've looked on Google for other ways, but they involve fucking with my registry, which I haven't done much of. I did look for what they said in the registry though, and couldn't find the offending files. This shit has to be somewhere, right?
I've used this program found here called rkill to stop it from running but the next step (using Malawarebyte's Anti-Malware) doesn't work. I've looked on Google for other ways, but they involve fucking with my registry, which I haven't done much of. I did look for what they said in the registry though, and couldn't find the offending files. This shit has to be somewhere, right?
MinionOfCthulhu on
0
Posts
Tried this, no dice.
For running Malware, drag a copy of the executable to your desktop so it creates a shortcut, and when your computer boots double click on that first - it wont be able to terminate already running programs. Something else I tried, was setting computer to restart, and then killing the restart process. The Anti-Virus Pro will have been killed and you should be able to start programs as normal. This is if the above stuff isn't working. Sucks that theres no work around and that some of these anti-virus measures seem ill-equipped to detect and stop it.
I'm not the sort of guy who normally advocates vigilante justice, but I think summary execution in a man-sized microwave oven is an appropriate punishment for the people who make these programs.
Load up Task Manager. Kill any process that is not required for Windows to function. Basically everything not running under "system". There should be the process for the fake AV in there.
Then load up msconfig (start > run > msconfig) and you should see the entry for the .exe in there somewhere. It will be under Application Data for the user. Obviously uncheck the process (and any other questionable/garbage stuff in there while you're at it) and then navigate to that app data folder and delete the exe. Delete all IE cache and cookes while you're at it.
That should do it.
The guy got it just from visiting some website that looked legit, too. Both using IE6 and then IE8.
Of course avast itself will nag the hell out of you until you register it, so it's not a huge improvement.
The problem with this is that the malware will kill any attempt to run certain processes. It is hit or miss, but definitely it kills Task Manager.
Try it from Safe Mode? I think that's how I got rid of it on a work computer once.
Edit: Beated.
Almost all this stuff needs to be done in safe mode to have any lasting effect.
I killed the program using rkill (which stops shit from popping up until I restart but still borks Steam and LoL) but I can't find it in the System Configuration. Would it be safe to just uncheck everything except for Malware and restart?
The registration is free for the home version and takes maybe five minutes to complete. I'd say it's a decent improvement.
Or instead of Avast you could use Microsoft Security Essentials, because it is awesome and free (as in beer).
Steam and League of Legends still don't recognize Internet Explorer though, which is weird. I even installed Internet Explorer 8.