How to remove AntiVirus
AntiVirus description
AntiVirus is a fraudulent security tool which misleads user into thinking their system is at high risk. It spreads via trojan. Trojan usually comes through system’s vulnerabilities. It makes a perfect background for malware to sneak. Once your computer is started it also begins its rogue scans and makes everything that user fall for this scam. Also note that you may see a small window titled Antivirus Agent and AntiVirus Security Alert titled “Threat detected!!”. It reads:
Threat detected!!
An attacker at port: 898 IP: 127. 83.45 has hijacked your computer and is probably gathering information now such browsing history and document data. Unfortunately, your antivirus is unregistered and cannot remove this threat.
This is a fraud and dangerous for your computer. Do not buy this fraudulent security tool. It can’t process any anti-spyware service. Those warnings it shows doesn’t even exist, so you are fully safe to ignore it. Choose reputable security program and terminate malware upon detection. Make sure you’ve deleted it and all its affiliated components.
How to get rid of AntiVirus
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from AntiVirus and the latest internet security threats. If your computer is infected with AntiVirus we strongly recommend automatic spyware scanner.
How to manually remove AntiVirus
To get rid of spyware such as AntiVirus you need to remove processes, search and delete registry keys, DLL and other AntiVirus related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic AntiVirus remover.
- Uninstall AntiVirus from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these AntiVirus processes:
%windows%\chnb8895.exe
%windows%\000b09274b.exe
c:\78gbc8r.exe
c:\avinstaller1.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Delete AntiVirus registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “avagent3974?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “avguard3876?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\freecell.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\limewire.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspaint.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmplayer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wordpad.exe
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these AntiVirus related files:
%windows%\chnb8895.exe
%windows%\000b09274b.exe
c:\78gbc8r.exe
c:\avinstaller1.exe