JS:FakeWarn-c has invaded my computer

Viruses and worms
1

Hi,

I have been hit with the JS:FakeWarn-c virus or malware and I’m unable to access any files or the internet. Everything, including all programs comes back saying it’s infected and cannot launch. A rogue program named AntiVir has installed and pop ups are abounding. I’ve been researching this problem and realize I’ll have to install new utilities in order to fix this problem but wonder how I’m going to do that when I can’t directly download these to the infected computer. The infected system is a one year old laptop running vista. Avast is installed and up to date on that computer but I do not have any other spyware/malware programs installed.

All I’ve done so far is run a scan in safe mode using Avast and it did not return any infections however, it does pop up from time to time saying I have a trojan horse virus with the name of JS:FakeWarn-c and do I want to move it to the chest which I’ve done but it has no effect on the problem.

Where do I go from here?

Thanks

2

I suggest you use Malwarebyte’s Antimalware.

3

Hi tonocats,

From what we experience, this tool cured it, run DrWeb;s CureIt after you have downloaded it from here: http://www.freedrweb.com/download+cureit/

polonus

4

Since I can’t access the internet, do I download this to a flash drive and install it that way? Is there any risk of the virus getting on the flash drive?

5

I have the same problem. A program named AntiVir has invaded my computer and is giving me popups warning of infections with something called BankerFox. I can’t run any programs.

6

Okay so I downloaded the two mentioned utilities to a flash drive to fix the problem but the infected computer won’t let the programs load or run. It says they too are infected. Now I’m afraid to stick the flash drive back into the non infected computer. Was I supposed to do this all in safe mode? I’m not sure where to go from here.

7

Hi lets try this first, if it fails go to Plan B

Note: If using Firefox right-click on any download links and choose Save As

Please download OTH to your desktop
Please download OTL to your desktop
Please download the attached file Scan.txt to your desktop

Double click the OTH file to run it and click Kill All Processes, your desktop will go blank.

http://oldtimer.geekstogo.com/OTH/OTH_Main.gif

Then select Start OTL. OTL will now run

[*]Double-click on the Custom Scans box and a message box will popup asking if you want to load a custom scan from a file
Select Scan.txt that you downloaded

[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

[*]Click the Internet Explorer button, post these logs in your Virus Removal topic.

Plan B

Download Rkill from here : there are several flavours to choose from, if one does not work then try the next

* rkill.com
* rkill.scr
* rkill.pif

Once it is downloaded, double-click on rkill in order to automatically attempt to stop any processes associated with Security Central and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Central when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Central . So, please try running Rkill until malware is no longer running. You will then be able to proceed with the rest of my instructions.

Do not reboot your computer after running rkill as the malware programs will start again.

Then run OTL as above

8

??? But I am not able to access the internet from the infected computer…

9

Then use the system you are using right now to download the tools, save to a CD or USB and transfer to the other system.

10

Hi, I did this as noted above and the programs on the usb drive install but won’t open. I get the same message that these files are also infected and will not launch. Nobody has said whether or not I am to be doing all of this in safe mode or not. I have been only booting up in normal mode so far.

11

Try Hitman Pro - Second Opinion Malware Scanner

How to Start Hitman Pro in Force Breach Mode

12

I too have the same problem. A program named AntiVir has invaded my computer and is giving me popups warning of a trojan called JS:FAKEWARN-D.

I can’t run any programs. The real problem is that I can’t transfer any program that might help via USB or the like. What the hell can I do?

13

Download and run Hitman Pro in Force Breach Mode by holding the left CTRL key when starting it up.

14

I just restored my computer to an earlier date through safe mode and it seems to have taken care of the problem with the malware. No pop ups and I can access the internet and all programs and files. My Avast updates automatically so if the virus database is up to date, and this malware is not something new, will Avast protect my system from any future attacks of this same malware or is it not capable of doing that?