Cleaning Persistant fake AV's in Windows 7

Viruses and worms
1

My malware magnet buddy ran across a persistant fake AV on his Windows 7, 32 bit machine last night. Browser was highjacked, task manager disabled, MBAM disabled, Avast file shield blocking fighting back, you get the picture. Closing the browser, rebooting did not solve the problem.

The process that fixed it:

  1. Reboot the computer
  2. When windows splash screen appears, turn the computer off with the POWER button.
  3. Reboot the computer.
  4. When the option appears to start the repair console, do it.
  5. After the repair completes, MBAM will now function. Update MBAM and perform a quick scan. MBAM will find and quarantine the little bugger.
  6. Fix the Avast installation
  7. reboot and you are good to go.

Just for peace of mind, I did a full system scan with AVAST, MBAM, and Hitman Pro. All was clean.

2

Thanks, gentle4ug, for posting what worked for you.

Hopefully, this will help others. :slight_smile: