AntiMalware GO description
AntiMalware GO is a fake security tool. The parasite spreads via trojan and downloads itself automatically without user’s knowledge and consent. Once installed it tries to trick user into purchasing “full” version of the program by showing numerous security threats and rogue warning messages. They usually state that your computer is severely compromised. For example:
Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.
Antivirus software alert
Infiltration alert
Your computer is being attacked by an Internet virus. It could be password-stealing attack, a trojan-dropper or similar.
Internet Explorer Warning – visiting this web site may harm your computer!
Most likely causes:
- The website contains exploits that can launch a malicious code on your computer
- Suspicious network activity detected
- There might be an active spyware running on your computer
Do not fall for this blatant scam because it may cause you serious problem. Malware neither is able to detect nor remove viruses therefore they don’t even exist. The only purpose it has that user pay small fees for the “legitimate” program. The application is malicious and fraudulent. None of the information should be trusted. Use decent malware remover and get rid of AntiMalware GO immediately.
Manual AntiMalware GO Removal
AntiMalware GO registry values:
HKEY_CURRENT_USER\Software\
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = '127.0.0.1:33440'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
Help: How to edit windows registry entries
Other malicious AntiMalware GO files:
%Temp%\\
%Temp%\\.exe

This trojan has mutated!
-Internet options box collapses as soon as opened.
-%TempDir%\[random] will not be deleted and the temp folder window will not close after trying
-regedit window collapses as soon as opened
-computer will not start in safe mode
Any ideas?
[Reply]