[Windows] How to Identify and Remove Fake Anti-Virus Software

May 27th, 2009

Being the computer go-to-guy amongst my friends, I have noticed a big outbreak of fake anti-virus software. This Fraud-ware tries to fool you into thinking you have thousands of infections, when you may only have 1 (being the bogus software itself).

It may ask you for a payment of $10-$50 to register and remove the threats- DO NOT DO THIS! You run the risk of identity theft, or a plain and simple rip-off.

These programs get into your computer without your knowledge or consent- it may be through pop-ups, bad files on P2P networks like Limewire, and many other ways.

If you do not get this taken care of, it can become worst. You will see more and more of these bogus products when you start your computer.

Signs to look for:

•   Bogus anti-virus/spyware programs often generate more “alerts” than the software made by reputable companies.
•   You may be bombarded with pop-ups, even when you’re not online.
•   High-pressure sales copy will try to convince you to buy RIGHT NOW!
•   If you’ve been infected, your computer may dramatically slow down.
•   Other signs of infection include: new desktop icons; new wallpaper, or having your default homepage redirected to another site.

(Mac users: if you run Windows using Boot Camp, Parallels or VMWare, these tips apply to you. However, at the time of this writing, Mac OSX does not have these problems.)

These are some of programs you need to look out for:

VirusRemover 2008
XP Anti Virus 2009
Anti Virus XP 2009
Windows Anti Virus 2009
PRO Antispyware 2009 (below)

(an example of bogus anti-virus software)

How to remove:

The following guide must be used at your own risk. Even though I am going step by step, you need to have working knowledge of malware removal. Every computer situation is different, so use at your own risk.

Step 1:

Download Malware Bytes

Step 2:

After installation, open Malware Bytes, and click the “Update” tab.

Step 3

Go to the “Scanner” tab, choose “”Perform Quick Scan”, and click the “Scan” button below.

Step 4:

If you are a victim the bogus anti-malware, you will get a count next to “Objects Infected” in red. Click the “Show Results” button below to view the infections.

Step 5:

After you look through the findings, check mark the infections you want removed, and click the “Remove Selected” button.

Removals may require a restart, so do so if asked to. I have had great luck removing these infections using Malware Bytes, if it does not help, try running it while Windows is in “Safe Mode”.

You can get into safe mode by pressing F8 right when your computer is booting up- good luck!