Trojan.FakeAV suspected

Crondex · Jan 18, 2011

Hi,

I am in a bit of Pickle....i somehow managed to have my pc infected by some trojan i can recall the exact name of but was something like Trojan ACKZ or similar, reading the symantec description of the trojans out there i believe i have the unqualified, inexperienced wilde guess its the Fakeav trojan or variant of it.

This happends after a tired night of gaming and then downloading a PDF file i suspected from 'the venus project' because then it started me asking all kinds of questions when i tried to open the file and some updates might have been required on java or adobe, i am not sure to be honest 4 hours of Left4dead2 and then doing some more 'work' on pc mashes the brains somewhat.

then the redirection started to some porn page, without me asking for it mind you. then the fake scans, then my avg doing a wimpsy job of trying to move all to vault but i kept coming back. some more redirecting to some homepages claiming to fix the problem and pay and arm and a leg (which i didnt) and just not being able to open either AVG console or internet , googlebar being detected as virus, pretty much all i could think off in a very tired mind.

gave up, switched off my PC and when i came back to it, to have another crack at fixing it, booted the pc and nothing...start screen compaq blah blah, the usual and the options 'boot menu' 'system setup' and 'system restore'.
continue to load and then black screen....with a little blinking cursor in the top left corner...no windows loaded no reaction.

so i went and checked 'boot menu' .. nothing usefull there, 'system setup' nothing there either and finaly 'system restore' not reacting...at all..

so erhm.... help?.....please?

TimW · Jan 18, 2011

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this aother user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Crondex · Jan 18, 2011

hi, thanks for the reply, i wish i could follow those helpfull instructions but i can not get to either windows or safeboot to provide you the information you describe in the instruction list.

TimW · Jan 18, 2011

If you cannot boot in any mode ( safe or normal mode ) and you cannot run any of the READ & RUN ME there is not much we can do for you except suggest what is in the below quote box

[*]Take the hard disk out and scan it in another well protected PC
[*]Use another PC to make a special CD which you can boot from to try and run virus and spyware scans or to at least backup data. CDs like the below:

http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html

UBCD4Win

http://www.sysresccd.org/Main_Page

http://trinityhome.org/Home/index.php?wpid=1&front_id=12

Kaspersky Rescue Disk.

BitDefender Rescue Disk-with-auto-update.

[*]reinstall

Click to expand...

Crondex · Jan 18, 2011

thank you for the suggestions, i have followed your advice and created two boot discs but to no avail, so only two options left, scan the HD on another pc and reinstall windows, pitty the image of the vista is obn the HD as well.

Thank you for your help so far, and i cant believe this is kind of free support.
much appreciated!

TimW · Jan 19, 2011

Let me know what you decide to do. You can try doing a repair install which might get you up and running, at which point we can then try to remove the malware.

Log in or Sign up

Trojan.FakeAV suspected

Crondex Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Crondex Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Crondex Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member