Computer help forum: Fake virus scan

You offer nothing is what the malware maybe, provide what you do know as best as possible.

I suggest you visit the "spyware,virus and security" forum and check the 1st sticky, etc. and follow the guide and/or get pgms. Post queries there as more knowledgeable users visit there on this topic, that could help you. Of course, you may need to use another PC, burn those pgms. in order to use later. I suggest also, visit the McAfee website and get the "stinger" pgm. to detect common malware. Next, you can load or boot-up into "safe mode" as a precaution to help run those AV pgms. etc.. if you're online with this PC posting your message, visit an online scanner website that could help as well. Allow them to detect and remove what they find.

Beware, even if you gain some success, you maybe better served by simply wiping out your HD and reloading the system to be as safe as possible from this attack. Of course, that's up to you and the results of any malware removal.

tada -----Willy

oldpuckbag, Phil is right on the money and what you picked up is probably "Antivirus Vista 2010". Follow the instructions at the link below which should get rid of it.

Automated Removal Instructions for XP Internet Security 2010, Antivirus Vista 2010, and Win 7 Antispyware 2010 using Malwarebytes' Anti-Malware:

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010

Tufenuf

Well, Mr. Puckbag (or should I just call you "Old"? *smile*), if I were you I would be very careful, and would be thinking re-install after carefully scanning anything I was keeping. The kind of virus that you've gotten gets into everything, and you may think that you can get rid of it, but most times it'll just come back. And will invite its friends into your system as well. Virus writers have been improving their products by leaps and bounds, and while some viruses are removable, the one(s) that you're talking about are not worth the work to remove. Re-installing on today's hardware just doesn't take that long, and you know you're going to end up with a clean system.

-Roger

Thanks for all the suggestions. I have 2 profiles set in Vista and I can get into my wifes fine and have no issues. I'm trying the MALWARE so I'll see what happens.

Old

Kees,
Ok, what's the best way to transfer the data?

Joe

I also found this running regedit. Anyone ever see this and can I delete? ufqyxjcr It is in C:\Documents and Settings\Joe1\Local Settings\Application Data\qrfwfv\ofsosftav.exe

There are quite a few of these fake antivirus malware examples out there. Completely eradicating them is hard. You may have a trojan which will download bad payload later on. www.eset.com offers a free online scan, and their NOD32 antivirus is superior (but not free). Still, I'd go with the already mentioned advice and do a complete wipeout and reinstall.

Thanks to everyone. Here's what I did. I deleted that line from my registry, updated my Norton Antivirus and scanned EVRYTHING possible. The scan found the same file in several different locations all of which I deleted. Rebooted and it has not come back since. I re-scanned everything to make sure.