*sigh* fake anti-spyware help....

eastcoasteddie · #1 05-18-2010, 10:45 AM

My ex- is using my desktop computer while writing her Thesis. She got a fake FaceBook message, supposedly from one of here friends....or masked as one of her friends. It contained a message with a link saying that she was tagged in a video or something. She's been tagged in videos like 3 times by this same person, so she didn't think about it being fake. As soon as she clicked it, she got this window saying the computer has viruses and that we have to get this AV Center spyware program. She called me right away and I told her not to touch ANYHTHING.

I searched and searched the hard disc for anything from AV Center and can't find it, not in the program files. I even did a system search for AV Center in the entire C drive, nothing.

Doing an internet search for this thing, I only come up with sites telling me to download these free AV Center-removal tools.

What do I do? How do I know these tools aren't another BS trojan horse?
for example:
http://cgidoctor.com/remove-av-center

THe AV Center windows pop up maybe every 10 minutes. I can just close them out as you would any window, but they keep coming back up. I read that so long as you don't agree to "get" the spyware, it should be harmelss, neusance pop up, but it should be removed ASAP.

I have Windows Defender and Symantec Client Security, both of which didn't find anything after 3 full system scans.
Also, it seems to be affecting her user log-on, not mine (running XP)

How d I deal with this?

electracoyote · #2 05-18-2010, 10:47 AM

Malwarebytes Anti-Malware has a free trial that might help. It's safe to use, I tried it and ended up upgrading to the full paid user version.

I'm not guaranteeing it will help with your particular malware spyware problem, but maybe worth a try.

Also, anti-virus software will not help with malware and spyware programs. I found that out too when my Norton did nothing.

Relic · #3 05-18-2010, 10:49 AM

+1 to malwarebytes

eastcoasteddie · #4 05-18-2010, 10:53 AM

thanks for the quick replies!!!! will try that!

**Eric Perry** · #5 05-18-2010, 11:27 AM

Malwarebytes as well as SuperAntiSpyware work very well, IMO. Spybot is old, but still kickin also. Ad-Aware blows.

MX21 · #6 05-18-2010, 11:32 AM

My wife just had something similar this morning. Any program she tried to run would pop up a notice that it had a virus and had a button to click to go download the antivirus/antispy software to protect my computer. Of course the "antivirus" software was not something I had installed. It was apparently an attempt to get us to enter credit card info on their website to pay for the "antivirus" program (which I'm sure would not work).

I couldn't run any virus or spyware checking programs, since the malware had hijacked the "run" command.

Here's what I had to do, in case it helps you:

1) reboot to safemode and run "msconfig". There were 2 entries in the startup tab for "asam.exe". Disable those entries.

2) reboot again and the virus warnings are gone. but internet explorer won't load web pages. in internet explorer, select the Tools - Internet Options menu. Select "Connections" tab. Click the "LAN Settings" button. I had to uncheck the "Use Proxy" box. I don't have a proxy, but it had apparently checked that box to prevent me from getting to any other websites.

Once those were done, everything was operating normally. Then I could run my (trusted) anti-virus/anti-spyware/anti-malware programs and make sure everything was clean.

Hope that helps somebody.

MX

Thunderscreech · #7 05-18-2010, 11:34 AM

Malwarebytes all the way.

Eublet · #8 05-18-2010, 11:35 AM

Malwarebytes is good. I suggest running that, and also ComboFix. Both have their strengths/weaknesses, but combined they can be used for free to fix something like this, and 99% of the time that's all it takes.

DanAleks · #9 05-18-2010, 11:37 AM

Go here

http://www.bleepingcomputer.com/
and search for AV Center. They've solved many problems for me.

Yerf Dog · #10 05-18-2010, 11:39 AM

Wait. You let your ex use your computer?

L-A · #11 05-18-2010, 11:42 AM

Quote:

Originally Posted by Yerf Dog

Wait. You let your ex use your computer?

You know, not every relationship ends in hatred and thrown knives.

Thunderscreech · #12 05-18-2010, 11:43 AM

Quote:

Originally Posted by L-A

You know, not every relationship ends in hatred and thrown knives.

You're right, some end with hard drive destruction and viruses...

Eublet · #13 05-18-2010, 11:45 AM

Quote:

Originally Posted by DanAleks

Go here

http://www.bleepingcomputer.com/
and search for AV Center. They've solved many problems for me.

This is indeed a good resource, but honestly it's completely unneccessary at this stage. Run Malwarebytes (for free), then run Combofix (for free), and I would bet money that those problems are gone. As an IT professional, I get calls from family/friends all the time with stories just like this one, and this is the same advice I give them.

eastcoasteddie · #14 05-18-2010, 12:29 PM

Quote:

Originally Posted by L-A

You know, not every relationship ends in hatred and thrown knives.

yes....mutual agreement on the "ex" part. No hatred, no fault of any kind by anyone. It was just time to go our separate ways and remain friends. Interesting what humanity is capable of....

eastcoasteddie · #15 05-18-2010, 12:30 PM

and thanks so much, everyone!

Thunderscreech · #16 05-18-2010, 12:32 PM

Quote:

Originally Posted by eastcoasteddie

yes....mutual agreement on the "ex" part. No hatred, no fault of any kind by anyone. It was just time to go our separate ways and remain friends. Interesting what humanity is capable of....

I think this needs to happen more often...

elgecko · #17 05-18-2010, 12:34 PM

Malwarebytes cleared up similar computer cooties I picked up a while back.

eastcoasteddie · #18 05-18-2010, 04:32 PM

Completed one MalwareBytes scan, found 26 files & removed them. I'm doing a 2nd scan for safe measure and it found one more so far...

I was reading about that ComboFix....says that you should use it only with professional assistance....what's up with that? or is that just a disclaimer so no one gets into a hissy fit with the guy that crated it?

Thunderscreech · #19 05-18-2010, 04:34 PM

Quote:

Originally Posted by eastcoasteddie

Completed one MalwareBytes scan, found 26 files & removed them. I'm doing a 2nd scan for safe measure and it found one more so far...

I was reading about that ComboFix....says that you should use it only with professional assistance....what's up with that? or is that just a disclaimer so no one gets into a hissy fit with the guy that crated it?

Use Malwarebytes. I use Malwarebytes and SpyBot for total Spyware protection, although Malwarebytes is fine by itself.

Eublet · #20 05-18-2010, 06:36 PM

Quote:

Originally Posted by eastcoasteddie

Completed one MalwareBytes scan, found 26 files & removed them. I'm doing a 2nd scan for safe measure and it found one more so far...

I was reading about that ComboFix....says that you should use it only with professional assistance....what's up with that? or is that just a disclaimer so no one gets into a hissy fit with the guy that crated it?

Comfofix is MUCH more intrusive (and thusly effective) than Malwarebytes. Professional assistance? Nah, not really. Just download and run it. You'll be fine. It will prompt you before doing anything too drastic, and will ask if it's okay to proceed. If you aren't sure, just post what it's asking here, and I'll help you out, or shoot me a PM if you prefer. A lot of times it finds and fixes a lot of bugs that Malwarebytes doesn't/can't catch. Worth the extra bit of time.