[CTS] Re: Fake AntiVirus
- From: RALPH GRIFFITH <argyliz@xxxxxxx>
- To: computertalkshop@xxxxxxxxxxxxx
- Date: Tue, 15 Jan 2013 10:18:52 -0500 (EST)
Thanks Bruce, solved the problem! Have a great 2013.. prior to retirement
(years ago) traveled to Rochester to the Kodak plant.. Ralph Griffith West
Chester, Ohio
We cannot direct the wind
but we can adjust our sails.
Sometimes that helps anon.
-----Original Message-----
From: Bruce Eddy <beddy1@xxxxxxxxxxxxxxxx>
To: computertalkshop <computertalkshop@xxxxxxxxxxxxx>
Sent: Mon, Jan 14, 2013 9:32 pm
Subject: [CTS] Re: Fake AntiVirus
Hi Ralph. You’re going back a long ways on this one?:))
You can boot to safe mode and see if the CPU stops running at 100%. Shut your
PC down. Then restart it. Instantly start tapping the F8 key on your keyboard.
That should bring up a black screen with white text. Use the arrow down key to
highlight safe mode. Then hit enter.
If the CPU usage drops to normal % then we know there’s something running in
windows full mode.
Reboot back to normal windows. …
You can hold down the left ctrl and alt keys and tap the delete key (all 3 keys
need to be at the same time, with the del key being the last key you touch.
That will bring up task manager. In the window that opens click the processes
tab. Then scroll down the list and look for the process using the most CPU
cycles. You can try right click on that process and chose delete. Then run a
scan for spyware.
An easier method might be to download a program called r-kill. That will turn
off all nonessential windows processes. Then I’d run a program called rogue
killer. And finally I’d end it with a scan using malwarebytes. If your hi CPU
use is from an infection, this routine should get it.
R-kill … http://download.cnet.com/RKill/3000-8022_4-75221743.html
Rogue killer… http://www.geekstogo.com/forum/files/file/413-roguekiller/
Malwarebytes….
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button
If this sounds pretty funky. You can contact me off list and we’ll work out
something so I can do the work for you from my house in NY.
Beddy1@xxxxxxxxxxxxxxxx
Hope this helps
Bruce
From: computertalkshop-bounce@xxxxxxxxxxxxx
[mailto:computertalkshop-bounce@xxxxxxxxxxxxx] On Behalf Of RALPH GRIFFITH
Sent: Monday, January 14, 2013 10:22 AM
To: computertalkshop@xxxxxxxxxxxxx
Subject: [CTS] Re: Fake AntiVirus
Getting an education from your post Bruce. Thanks. this 82 year old novice
needs some advice. My computer CPU runs at 100% most of the time. Is there a
simple fix for this?
Thanks in advance Ralph Griffith West Chester, Ohio
We cannot direct the wind
but we can adjust our sails.
Sometimes that helps anon.
-----Original Message-----
From: Bruce Eddy <beddy1@xxxxxxxxxxxxxxxx>
To: computertalkshop <computertalkshop@xxxxxxxxxxxxx>
Sent: Thu, Feb 17, 2011 9:05 am
Subject: [CTS] Re: Fake AntiVirus
Hi Ray… Try doing a clean boot. Run MSconfig. 2nd tab labeled ‘Boot’ chose
‘safe boot’, next tab services…. Chose ‘hide all MS ‘ then disable all the
rest. Under startup tab, disable anything that looks funky or not truly needed
to boot.. or just disable all and be done with it… Reboot your system after
downloading the Vipre Rescue Program and The Regrun Reanimater. Then run your
Malwarebytes, reboot…then back in clean boot run the Vipre Rescue program…
reboot… then run the Regrun Reanimater if needed. Just for kicks you can also
run the SuperAntispyware program.
That combination should get virtually any machine that’s ‘save-able’ back in
business. Once you think the system is clean, rerun MSconfig, under the General
tab chose ‘normal’ startup. That will enable everything you disabled before.
Then check for windows updates. As a last option, I usually run the MS Live
Safety Scanner to clean things up .
HTH
Bruce
From: computertalkshop-bounce@xxxxxxxxxxxxx
[mailto:computertalkshop-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Roney
Sent: Wednesday, February 16, 2011 2:31 PM
To: computertalkshop@xxxxxxxxxxxxx
Subject: [CTS] Fake AntiVirus
I've run across a "Fake AntiVirus" a few times recently.
It's usually been "Security Center 2011" or something similar thats been
floating around for the last few years.
I've been using Malwarebytes AntiMalware, Spybot Search & Destroy, and AVG to
kill/remove/clean it.
Any other suggestions on this disabling issue?
-- Ray --
Other related posts:
