Sunday, March 07, 2010

Fake Antivirus: HMFVSTAV.EXE

Microsoft Security Essentials failed to detect it, however hmfvstav.exe is a Fake Antivirus spyware program. This program disables the Windows Security Center, Windows Update, and legitimate antivirus software. It also prevents the launching of Task Manager to protect itself and disables browsers like Chrome and Firefox.

I was able to remove it by booting into safe mode and simply deleting the file.
I found the file in:
C:\Documents and Settings\USERNAME

Also be sure to remove its registry entry located at:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run



No comments: