1 of 4
Danger level 10
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
AntiVira Av , AntimalwareGO
Infection Video Antimalware GO

Antimalware GO

Despite the best efforts of the online security industry to educate its consumers on the perils of allowing rogue security tools to run wild on their PCs, many users continue to fall for the clever lies and exaggerated marketing campaigns of rogues such as Antimalware Go. This rogue antimalware app finds its roots in the same family as well known and hotly disputed rogues AntiVira AV and Antivirus .NET. Although seemingly legitimate and extremely beneficial to a PC’s health and security, Antimalware Go does not have the ability to detect or remove any type of threat from a system, but is indeed a malicious infection in itself.

Download Spyware Removal Tool to Remove* Antimalware GO
  • Quick & tested solution for Antimalware GO removal.
  • 100% Free Scan for Windows

Antimalware Go’s infiltration into the system is virtually undetectable. This is due to the infection methods employed by this rogue, which includes making use of seditious Trojans to root its infections in its intended victims’ PCs. This fact alone makes it that much harder to detect and effectively destroy Antimalware Go from the system. Trojans carrying the Antimalware Go infection are distributed via fake online malware scanners and treacherous browser hijackers, among many other sly tactics and methods.

NOTICE:

Antimalware GO is blocking your Internet connection, and you can’t install Spyhunter without it. To download the Spyhunter installer from pcthreat.com you need to boot your pc in safe mode with Newtorking. The following instructions will help you to do so:

1. Restart your computer.
2. When the PC starts showing some information, start tapping F8 key until you are presented with a menu.
3. To navigate use the arrows keys and choose SAFE MODE with Networking, then press ENTER.
4. Use Internet fix instructions bellow to reestablish your Internet access. Now Download Spyhunter from main Pcthreat.com page and save it to Desktop.
5. Restart your computer. When normal mode boots up, you should be able to successfully run Spyhunter which will kill Antimalware GO infection and will further allow you to remove all infected files.

The user will remain largely unaware of the presence of Antimalware Go on the system until such time that the rogue decides to start its attack on the system. This will happen through the user being spammed by various false security messages generated by Antimalware Go. These fake security messages were developed with one goal in mind; to panic the user into thinking his system is under attack. This is done in an effort to mistakenly convince the user that Antimalware Go has the ability protect his system from these attacks, but only once he parts with his money. Some of the more notorious fake security messages include the following:

Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Antivirus software alert
Infiltration alert
Your computer is being attacked by an Internet virus. It could be password-stealing attack, a trojan-dropper or similar.

Antimalware Go will also configure your computer to use a proxy server in order to hijack your web browser, and will then display warnings when you browse the web. This warning is:

Internet Explorer Warning - visiting this web site may harm your computer!
Most likely causes:
- The website contains exploits that can launch a malicious code on your computer
- Suspicious network activity detected
- There might be an active spyware running on your computer

It goes without saying that none of these bogus security warnings can be trusted, and that all correspondence received from Antimalware Go should be treated as highly suspicious and suspect in nature.

You will only be able to take back control of what’s rightfully yours by taking the required action to permanently get rid of Antimalware Go. Do this by investing in a genuine security tool which will not only obliterate Antimalware Go from the PC for good but also protect against similar future attacks and threats.

Download Spyware Removal Tool to Remove* Antimalware GO
  • Quick & tested solution for Antimalware GO removal.
  • 100% Free Scan for Windows

How to renew your internet connection:

This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
  1. Open Internet Explorer and go to >Tools< select >Internet Options<

  2. Select >Connections<

  3. Select >LAN Settings<

  4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

  5. Now you can download the SpyHunter scanner and remove the infection.

Download Spyware Removal Tool to Remove* Antimalware GO
  • Quick & tested solution for Antimalware GO removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Antimalware GO

Files associated with Antimalware GO infection:

hoqlhywhmof.exe
%TEMP%\[random]\[random]hmof\.exe
%AppData%\[random]\[random]sikk.exe
%TEMP%\[random]\[random]sikk.exe
\Users\AppData\[random]\[random].exe
%CommonPrograms%\Antimalware GO
%TEMP%\[random]\[random]sika.exe
%AppData%\[random]\[random]sjmo.exe
%AppData%\[random]\[random]sika.exe
%AppData%\[random]
%AppData%\[random]\[random]affm.exe
%CommonDesktop%\Antimalware GO.lnk
hoqlhywhmof.exe

Files associated with Antimalware GO infection (Win7, Vista):

%LOCALAPPDATA%\[random]\[random].exe

Antimalware GO processes to kill:

hoqlhywhmof.exe
hoqlhywhmof.exe
%TEMP%\[random]\[random]hmof\.exe
%AppData%\[random]\[random]sikk.exe
%TEMP%\[random]\[random]sikk.exe
%AppData%\[random]\[random]affm.exe
%TEMP%\[random]\[random]sika.exe
%AppData%\[random]\[random]sjmo.exe
%AppData%\[random]\[random]sika.exe

Remove Antimalware GO registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:33921″
HKCU\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware GO
HKLM\Software\Microsoft\Windows\CurrentVersion\Run “AAntimalware GO”
HKCU\Software\Antimalware GO
Disclaimer

Comments

  1. Allan W Feb 26, 2011

    Was infected by 'AntiMalware GO' virus, used your infection scanner and 100% satisfaction.
    I found you on my first scan for a tool to remove this virus, well done.

  2. Stefan Feb 26, 2011

    Hello !
    i removed tiz F***in Malware by using the TASK-Manager Strg+Alt+Del and sametime hammmering on alt+F4 - so i preventet malware from starting - so i can use Task-Mamanger and stopp the Prozess. Than i reconfiguered my internet and here i am - online again :-)

    Stefan from GERMANY

  3. joe Feb 26, 2011

    thank you sooo much…..u saved me the trouble and time of taking my pc to the store……thnks a million….all ur steps work and did fix my

  4. john Feb 26, 2011

    THANKYOU!!! I am very greatful for your help! I have been a victim of a great deal of viruses over the years, and its cost me several computers and the devistation of having an infected computer and not being able to do anything about it, this time you have saved me from this trouble! I am deeply greatful thankyou people of pcthreat.com!!!!!!

  5. Theo Feb 28, 2011

    I followed the steps but the malware wouldnt let me start spyhunter4 when in normal mode. So i renamed the spyhunter4.exe file iexplore.exe, this allowed the program to startup successfully. I think antimalwarego doesnt see iexplor.exe as a threat so it lets it run.

  6. Pcthreat Feb 28, 2011

    Theo,

    Please wait until later today. Spyhunter definition database will be updated with new Antimalware Go files.

    Or you can use Spyware HelpDesk and Contact Spyhunter Support team. They will help you to fix any problem

  7. Marc B. Mar 1, 2011

    My dad is pissed like hell after this ***** appeared. We will try to do your step cuase i'm seriously pissed.

  8. Sander Mar 2, 2011

    Yesterday, I misspelled the website I wanted to visit. I typed instead of and AntiMalware GO took over my pc. I followed your instructions and now I'm back in business :-) Thanks a lot, guys! Greetings from Sander In der Maur, the Netherlands.

  9. J Mar 2, 2011

    except you have to pay for it. :(

  10. kade Mar 3, 2011

    thnks so much. the stupid **** malware stopped me from doing anything

  11. S Mar 3, 2011

    I don't understand this helP!!!

  12. Pcthreat Mar 4, 2011

    hello S,
    Write us your problem. We will try to help you.

  13. Angie Mar 4, 2011

    The process I had to kill was pctsvc.exe. Then I had to delete PCTools folder in safe mode and deregister some DLLs. But now another process keeps coming up - fxmuneqhmof.exe. Tracked it to Windows prefetch file, deleted that, but it still comes up on start-up.

  14. debmck Mar 6, 2011

    Hi, I've searched for all the processes in the registry and i don't have any of those files - has the virus changed names already or am i looking in the wrong place? Is there any other way to get rid of it wihtout being connected to the internet (even in safe mode) as when i shut down and restart my modem loses settings and i can't go to the admin site for it to change the settings and get it to work while i do the removal...?? help, my computer is DEAD with this virus!!!

  15. Pcthreat Mar 9, 2011

    debmck,
    The thing with Antimalware GO is that it doesn't have a constant file names for the main files - they are always changing. The best way at first to kill the fake Antimalware Go is to Download SpyHunter scanner installator from the main pcthreat.com page and save it on the USB flash drive.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.