Oct 07

AV Guard Online Rogue of the FakeScanti Family

AV Guard Online is a rogue of the FakeScanti Family, that uses fake alert scare tactics and fake scan results showing the computer is infected tactics along with the blocking of other applications when trying to run them to scare the user into purchasing the rogue to clean the fake scan results it shows.

AV Guard Online (FakeScanti) GUI

This one also uses a fake Blue Screen of Death that then make it appear windows is restarting, along with dozens of pop ups messages about spam emails being sent.

The majority of infections with this rogue also include a rootkit called Sirefef.

Files and Locations:
%SYSTEM%\<Random Named File>.exe


The FakeScanti rogue can be removed using manually methods, however, the AV Guard Online rogue is difficult as it will try and re-infect the PC using the Siefef rootkit infections, and requires re-starting into safe mode, so it is recommend to use our Antispyware/Antivirus removal tool, VIPRE Antivirus. You can download a free trial to remove the  rogue from your computer for no cost by clicking on the link below:


If you are unable to download and install our malware removal tool because this has infected your computer and is not allowing you to install the program, you can use our VIPRE Rescue Disc here:


Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>