FakePAV

FakePAV is a family of rogues that share similar infection symptoms and has the same goal when they enter your computer. They usually pose as official products of Microsoft Security Essentials, and unfortunately a lot of users get tricked by FakePAV rogues, because they copy the design and layout of Microsoft Security Essentials security programs, and the users who are worried about their computers are too frustrated the check the credibility of a program that sends them fake threat reports. As a results FakePAV tricks the user into buying useless rogue antivirus system, extorting the hard earned money from the user’s bank account.

In order to stay in your computer for a longer period of time these rogues can also successfully terminate such processes as Windows Registry Editor, Internet Explorer and Windows Restore. FakePAV terminates Windows Registry Editor, because upon the installation the rogue modifies the Registry that allows it to run every time you start your computer. With Registry Editor you might be able to delete the keys added by FakePAV, so the rogue terminates the program. Internet Explorer is killed so that you would not be able to find information on rogue removal and Windows Restore is blocked so that you would not be able to perform a system restore and get rid of FakePAV. The rogue is also known to kill Adobe programs, bitorrent clients, other internet browsers, Java applications, useful toolbars and instant messaging programs.

The rogues that belong to the FakePAV family include CleanThis, ThinkPoint, Red Cross Antivirus, Windows Remedy, Windows Defence Center, Palladium Pro, Windows Debug System and many more. It all starts with a fake Microsoft Security Essentials Alert message that you have been infected by Unknown Win32/Trojan. If you follow the instructions given by this infection you will end up fully installing the rogue into your system. Then the rogue will perform a fake system scan if you try to remove the threats with it, it will state that it cannot do it unless you purchase the full version of the program. Also, FakePAV does not allow you to close the rogue’s window, because once you try to do so, it says “Current settings don’t allow unprotected startup. Please check your settings”.

In a sense FakePAV hinders your system to the point you can no longer load your programs, or browse the internet. The main focus is only on the rogue and how it wants to help you removing the “threats”. However, you should not do what it wants you to. If you cannot remove FakePAV on your own, get yourself a good computer safeguard tool that will help you to terminate FakePAV automatically. If your internet browser is blocked, you need to follow the instructions to unblock it, or load Windows in Safe Mode with Networking and download the computer security program. To load the Safe Mode with Networking, restart your computer and press F8 while it boots, and then choose Safe Mode with Networking from the option menu that appears.

Whatever you do, you have to remove FakePAV from your computer as soon as possible, because not only does this rogue aim for your money. It can successfully cripple your system, and in the end it can cause an ultimate system crash.