Fake Windows Defender virus

[fohat.digs]

My son got hit by the "Fake Windows Defender virus" and it looks like a really nasty beast, disabling any attempts to get rid of it including registry edits and Malwarebytes. Apparently you can't even use the Task Manager to make it stop.

We gave up and did a full reformat/reinstall, but do any of you have any experience with it, and/or know any way to get rid of it.

And, of course, where it comes from and how it attacks?

Thanks!

[digi]

That sucks, I've had good luck with Combofix, check it out next time, hehe.

[njbair]

At some point it must ask for elevated privileges. Like most modern malware, it may have presented itself as a software update or something. I've dealt with similar malware and was able to trace it back to fake Flash Player update "ads" on the user's Juno web mail. Apparently Juno allows anyone to advertise who pays them.

[inanis]

For stuff like that a good boot disk is always helpful to get malware/virus off. If you can boot into a different environment, whether that is CD or USB and then run a scan on your affected disk it tends to do a pretty good job at cleaning it out.