afantispy, fake antivirus.. WTF

Discussion in 'Malware Help (A Specialist Will Reply)' started by Pierce123, Dec 21, 2010.

  1. Pierce123

    Pierce123 Private E-2

    Hello all, first time poster.. in a very stressfull situation here.

    For those who dont know what afantispy is...
    Afantispy.com is a malicious domain that promotes for rogue anti-spyware Antivirus Scan. Afantispy.com will take control your computer, whatever you type in the addressbar, you will end up with Antivirus Scan purchase site. Afantispy.com may look like a legitimate website, and these scammers do a pretty good job of making their program look real with their testimonials and “Antivirus Scan, Proven Antivirus Protection” tagline, but don’t believe any of it. Do not fall for this trickery and have Afantispy.com removed from the computer immediately.

    I have pretty much read every site out there about this virus and done everything. I have managed to remove the fake popups/ no control of cpu itself. HOWEVER, after the first several minutes of starting my CPU up i have 2-4 min of my normal inet. (no box checked in proxy section) however after a few minutes my macafee immidiatly says : YOUR COMPUTER IS ASK RISK click here to address issues", after clicking it says " your real time scanning is off". then gives me the option to turn on. Of course i turn it back on but after a second or so, it insta turns off and gives me same message. I have tried a TON of different things, 3 different malware-removal programs, system restore, restarting constantly in safe-mode, Rkill and i still cannot get online other then the first 3 min after rebooting.
    I have not tried locating the files directly and deleting them that way.
    I would be happy to run any scan and attach the log if needed.

    So... it seems as if my cpu is acting the same as it did before this issue (2 nights ago randomly) BESIDES me not able to get online.

    Any help would be greatly appreciated, would also be willing to pay for a solution.

    -Pierce
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Welcome to Major Geeks!

    Please read ALL of this message including the notes before doing anything.

    Pleases follow the instructions in the below link:

    READ & RUN ME FIRST. Malware Removal Guide


    and attach the requested logs when you finish these instructions.
    • **** If something does not run, write down the info to explain to us later but keep on going. ****
    • Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

    • After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
    Helpful Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
    3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
    4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
    Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.
     
  3. Pierce123

    Pierce123 Private E-2

    Did every single step, and after uninstalling macafee i was allowed internet access again. My CPU seems to be working normally however i am unsure how to obtain macafee again as i thought i had a 3yr subscription on it when i bought my CPU. Not sure how to do it tho. If i do have to re buy some anti virus, what is recommended ?

    Also, Thank you for all the help and support! much appreciated!
     
    Last edited: Jan 3, 2011
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    I reccommend FREE antivirus not paid for. I use Avast personally.

    You're welcome, but feel free to attach those logs that you have.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds