Fake Antivirus!!!

T4LFR

Hi,
Got a virus yesterday (Ie. A fake antivirus) that wont let me on the net etc, pop ups keep coming up urging me to buy the antivirus etc etc.

I ve tried booting in safe mode (with networking) updating malewarebytes and scanning (full and quick) and although it has found a couple of things it hasnt removed it. Scanned with Avast, again found a couple of things but didnt remove!!!

I cant seem to identify what the process name is so that I can stop it via task manager or msconfig...

Any suggestions on next steps, bearing in mind i cant get on the net!

Cheers:mad:

RussJK

If it looks like this, then follow this guide:
http://www.bleepingcomputer.com/virus-removal/remove-system-tool

The only additional steps compared to what you've done is that it uses "rkill", which shuts down the fake antivirus, and it has checks to stop browser hijacks.

This is an alternative approach, which uses the registration codes as though you had payed the scammers the money:
https://forums.moneysavingexpert.com/discussion/3093804

RufusForever

Just wanted to thank RussJK very much, came across this thread by chance as my daughter had the same problem on her laptop, followed your advice and it's now sorted, so much appreciated.