Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


AV Fake Antivirus Popup / Can't run MalwareBytes

  • Please log in to reply
1 reply to this topic

#1 phillipus_rex


  • Members
  • 9 posts
  • Local time:09:18 AM

Posted 25 June 2010 - 11:25 PM


Suddenly my computer started getting a popup saying that my computer was being attacked. When I clicked "Yes" to block the attack, I was taken to a fake "AV" Antivirus website asking me to purchase this in order to remove the spyware.

Also, it will not allow me to run MalwareBytes - has a message saying "file infected". Can't run AVG antivirus or AdAware either or the Chrome web browser.

I tried to run HiJackThis and I got the same message saying "Cannot open - file infected".

The specific message of the antivirus is:

"Antivirus Software Alert -
Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan - dropper or similar.
Details: Attack from: <various IPs that change>
Do you want to block this attack? Yes or No"

I cannot run programs that would allow me to take screenshots either - sorry I cannot provide these.

How do I get rid of this???

Here is my system info:

Windows Vista Home
Pentium Dual core cpu T4200 @ 2GHz
32 Bit

Thanks in advance.

Edited by phillipus_rex, 25 June 2010 - 11:32 PM.

BC AdBot (Login to Remove)


#2 Budapest


    Bleepin' Cynic

  • Moderator
  • 23,579 posts
  • Gender:Male
  • Local time:12:18 AM

Posted 28 June 2010 - 05:47 PM

Try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then boot into Safe Mode and double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users