Win 7 Antispyware 2012

This is an archive of the mabination.com forums which were active from 2010 to 2018. You can not register, post or otherwise interact with the site other than browsing the content for historical purposes. The content is provided as-is, from the moment of the last backup taken of the database in 2019. Image and video embeds are disabled on purpose and represented textually since most of those links are dead.

To view other archive projects go to https://archives.mabination.com

ihateyou2 wrote on 2011-12-16 20:09

Helppppppppp meeeh! This f***king fake ass mofo is blocking me from doing anything on my computer. I can't go on the internet, open any folder, nothing works. I have no way of deleting this. :( Please can anyone give me some advice...I'm on my sister's mini laptop.
Excalibuurr wrote on 2011-12-16 20:18

When you start up your computer, spam the F8 key, there should be a menu that pops up, click on the "Safe Mode" key. Then uninstall the program from there. Next time, try not to use cheesy looking anti-viruses, get Microsoft Security Essentials if you're looking for a free anti-virus and you have the genuine version of Windows 7
ihateyou2 wrote on 2011-12-16 20:32

well actually i wasnt looking for any antiviruses at all...i was browsing the transformice forums then my antivirus picked up something and 5 minutes later my windows all closed and took over my entire computer. T_T
RicochetOrange wrote on 2011-12-16 20:40

Quote from ihateyou2;694927:
well actually i wasnt looking for any antiviruses at all...i was browsing the transformice forums then my antivirus picked up something and 5 minutes later my windows all closed and took over my entire computer. T_T

What antivurus are you currently running?
ihateyou2 wrote on 2011-12-16 20:42

Webroot Antivirus with Spy Sweeper
ihateyou2 wrote on 2011-12-16 20:45

Anyways I went into safe mode but I don't know what to do and where to delete this at all. I didn't download it, it somehow attached to my computer so... wut do now o_o

edit: ooops double posted
RicochetOrange wrote on 2011-12-16 20:53

Quote from ihateyou2;694939:
Anyways I went into safe mode but I don't know what to do and where to delete this at all. I didn't download it, it somehow attached to my computer so... wut do now o_o

edit: ooops double posted

No. I'm not sure about the software, but I would avoid using it's uninstaller, risking opening up the software in safe mode, thus requiring a restart.
(Preferably on a second computer) download Malwarebytes, and either AVG Free or Microsoft Security essentials. Put them on a flash drive/portable HD, or burn them to a disc.

Install them on the infected computer, and have each run an individual scan one at a time. The hostageware (the fake virus software) should come up in the scans. Have the legitimate programs delete it. Make sure you run both, as there is a possibility that one or the other might not pick it up.

EDIT: Also, after verifying the hostageware has been completely removed, I recommend making sure you install Firefox/Google Chrome if you haven't already, and install Adblock+ addon, and possibly even the NoScript addon if you really want to get really into security.
ihateyou2 wrote on 2011-12-16 21:01

Because I cant open up any .exe's or folders, I went into safemode and got the malwarebytes onto my desktop using my usb, but can't install it in safe mode.... so I started it up normal again and tried to install from there, but it freezes when installing. Yup this fake antivirus is goooood at what it does......
RicochetOrange wrote on 2011-12-16 22:40

Quote from ihateyou2;694958:
Because I cant open up any .exe's or folders, I went into safemode and got the malwarebytes onto my desktop using my usb, but can't install it in safe mode.... so I started it up normal again and tried to install from there, but it freezes when installing. Yup this fake antivirus is goooood at what it does......

Ok, I just did some Googleing and it does open up when you open .exe's. Hold on...

Ok, the reason you can't open any .exe's is because it hijacked the Registry. That makes this a much more difficult problem. Don't try fixing it yourself, as messing with the Registry has the potential of completely ruining your computer, unless you know what your doing.

http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012
That website has a tutorial on removing this specific scareware, and includes a .reg file that should allow you to open .exe's again.

Also, do NOT plug your USB device into another machine until you have removed the scareware, and have done a proper scan of the drive. There is a possiblility of it being infected.
ihateyou2 wrote on 2011-12-16 22:59

Ok Ill try that, hopefully it'll work. I'll be back later with the answer because I have to go do something.