Beware of malicious software "WinPC Antivirus"

isabella01

This has caused me such a headache this morning...

BEWARE of a nasty malware called Win PC Antivius!
This is a rogue program it looks alot like Windows own security but is not,the infections,hidden file transfers,trojans etc that it says you have on your PC are all fake these are complete lies fabricated to make you buy it!!!!
It will persist until you have purchased it...DO NOT BUY THIS!
Sadly neither my AVG nor my Spybot detected it..I Googled it and found instructions and a free to download program to remove it - "Malwarebytes' Anti Malware" http://www.malwarebytes.org/index.php(which I see is recommended on this board,I found it easy to use and effective!)

I sure as heck dunno where it came in from,I can only surmise from one of the few websites I visited last night(Facebook,Just Giving & Raising Kids) as I didn't open any emails. I have only just removed it and hope never to get it again it is a horrid nasty pest of a thing..and to take the guise of Windows Security it will sadly hook in some unsuspecting folks!
So please beware

gaming_guy

there are millions of these types of programs.

XP antivirus
Antivirus 2008/2009
Antivirus 360

are just a few that i can think of

mumoftwo

I got this on my computer yesterday and am now looking for solutions on my trusted MSE sites, thanks for the link, going to try that now on my pc downstairs.

Jaffa.

Yeah the renewal subscription is something like every hour as well, so they'll charge you £30 or whatever it is every hour!

mumoftwo

Just tried to remove this devil, but no luck. I must be doing something wrong.

could someone please give me an idiot guide to remove this thing

I started comp in safe mode, downloaded the malware thingy as per above link, icon came up on desktop, tried to use it (still in safe mode) nothing happened

restarted comp in normal mode: Up popped the Winpc malware, tried to double click the malware removal thing, nothing happend, won't let me do anything,

I did do a Nortan scan and according to that everything is fab but obviously it is not.

What do I need to do, step for step please, do I need to disable something first or do everything in safe mode, I am totally stupid and get so mad, but am trying to learn.. Thank you so much for your help in advance.

(just in case you are wondering why I can still access the internet, I am on my DD's comp)

Money_Grabber13579

mumoftwo wrote: »

Just tried to remove this devil, but no luck. I must be doing something wrong.

could someone please give me an idiot guide to remove this thing

I started comp in safe mode, downloaded the malware thingy as per above link, icon came up on desktop, tried to use it (still in safe mode) nothing happened

restarted comp in normal mode: Up popped the Winpc malware, tried to double click the malware removal thing, nothing happend, won't let me do anything,

I did do a Nortan scan and according to that everything is fab but obviously it is not.

What do I need to do, step for step please, do I need to disable something first or do everything in safe mode, I am totally stupid and get so mad, but am trying to learn.. Thank you so much for your help in advance.

(just in case you are wondering why I can still access the internet, I am on my DD's comp)

Download this:

http://www.filehippo.com/download_malwarebytes_anti_malware/

update and run a FULL scan. Then fix whatever it finds and post the log back here. If it's bad, you might want to run a hijack log as well.

4743hudsonj

any ideas on how this virus gets to ur system?

my brother keeps getting it after ive gotten rid of it with malwarebytes.

he uses avira super anti spyware also and when i delete the program from malwarebytes the system is fine until somehow he gets it again, he must just be stupid to fall to this program 3 times so yeh, any idea on where you get it from to prevent him from getting it again?

Browntoa

yes, stop him using a PC !!!

Browntoa

mumoftwo wrote: »

Just tried to remove this devil, but no luck. I must be doing something wrong.

could someone please give me an idiot guide to remove this thing

I started comp in safe mode, downloaded the malware thingy as per above link, icon came up on desktop, tried to use it (still in safe mode) nothing happened

restarted comp in normal mode: Up popped the Winpc malware, tried to double click the malware removal thing, nothing happend, won't let me do anything,

I did do a Nortan scan and according to that everything is fab but obviously it is not.

What do I need to do, step for step please, do I need to disable something first or do everything in safe mode, I am totally stupid and get so mad, but am trying to learn.. Thank you so much for your help in advance.

(just in case you are wondering why I can still access the internet, I am on my DD's comp)

download malwarebytes , then rename the file from mbam-setup.exe to something else like cleanup.exe by right clicking on the file.

you could try combofix

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Money_Grabber13579

4743hudsonj wrote: »

any ideas on how this virus gets to ur system?

my brother keeps getting it after ive gotten rid of it with malwarebytes.

he uses avira super anti spyware also and when i delete the program from malwarebytes the system is fine until somehow he gets it again, he must just be stupid to fall to this program 3 times so yeh, any idea on where you get it from to prevent him from getting it again?

It must be a dodgy website he's visiting (Not necessarily anything bad about the website, but it may have been hijacked and a virus placed on it, or could be placed in an advert) Certainly if it's the same thing 3 times, there must be a common thing that he's doing each time! And I wouldn't internet shop until it's all sorted out on that computer!

Of course, it may be possible that malwarebytes isn't removing all the virus, and a small part of it is reloading itself each time?

geordielass

I am having pretty much the same problem as mum of 2 with Malwarebytes.

I can't open Malwarebytes or Spybot.AVG is saying nothing's wrong.I downloaded Windows Defender which found a Trojan and I removed that,I have ran crap cleaner in Safe Mode but don't know what else I can do.

I cannot open windows update or use system restore and have ran out of options.

I do keep getting the message 'The instruction ox7c8841ee referenced memory at ox00000000.The memory could not be written.click on okay to terminate the programme...haven't got a clue what this means.

Any suggestions would be appreciated

Thankyou