Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2205 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mal/FakeAvHm-A infection

smith497

Dear Sophos people,

my sophos anti-virus tells me I've been infected with the Mal/FakeAvHm-A. It was last updated the last time about two weeks ago and the reported malware is from March 2009. Nevertheless spam pages and unwanted dialogs are opening. In addition I am not able to open sophos, regedit, msconfig or any other program useful to get rid of this. so what can I do?

:3223


This thread was automatically locked due to age.
Parents
  • 0

    It may be a bit late for me to reply with this, but we've had a couple of laptops come in with Fake Anti-virus programs which have installed into the user's profile (thus bypassing the need for admin rights).  Quite how it got past Sophos in the first place is a different matter, but the easiest way I've found to clean these infections is to remove the HD and connect it via USB to a working machine and then run a full scan on the external drive.  Once all traces of infection have been removed, it's a lot easier to fix any damage caused by the virus (usually easier just to kill the entire profile and restore files and settings from a backup).

    SATA/USB adapters aren't expensive (only a few pounds/dollars/whatever each), so it's always worth having a couple around for such situations.

    :3307
Reply
  • 0

    It may be a bit late for me to reply with this, but we've had a couple of laptops come in with Fake Anti-virus programs which have installed into the user's profile (thus bypassing the need for admin rights).  Quite how it got past Sophos in the first place is a different matter, but the easiest way I've found to clean these infections is to remove the HD and connect it via USB to a working machine and then run a full scan on the external drive.  Once all traces of infection have been removed, it's a lot easier to fix any damage caused by the virus (usually easier just to kill the entire profile and restore files and settings from a backup).

    SATA/USB adapters aren't expensive (only a few pounds/dollars/whatever each), so it's always worth having a couple around for such situations.

    :3307
Children
No Data