How to remove Antivirus
Antivirus description
Antivirus is a misleading application which spreads to user’s computer with the help of trojan horses. With the aid of trojan infections, spam emails and various websites it tends to be affiliated one can easily fall victim to this dubious program. Malware downloads itself automatically without noticing by the user.
Once active it will perform a quick system scan and report fake malware infections on your computer. It may display rogue security alerts as well. For example:
Warning! Network Attack Detected!
Your computer is being attacked from a remote PC.
Attack from <ip address>
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.
Antivirus alert – Critical Threat Detected
Warning: Network attack detected
Network attach has been detected. Process is attempting to access your private data.
Unauthorized person tries to steal your passwords and private information. Click on the message to prevent identity theft.
User’s activity loggers detected!
It’s strongly recommended to remove detected threats right now!
You are using a trial version.
It is recommended to purchase a commercial version.
Danger!
Harmful viruses detected on your computer. This malicious software may harm your computer. Click on the message to ensure the protection of your computer.
Warning! Keylogger detected!
Keylogger activity detected on your PC!
PDM.Keylogger activity has been detected. Process is trying to redirect keyboard input. Your passwords and other private information are at risk. Please click the button below to block and remove this threat now.
Warning! Adware detected!
Adware Module detected on your PC!
Zlob.Porn.Ad adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click the button below to locate and remove this threat now.
It is highly recommended to remove this threat from your PC.
You are using a trial version. It is recommended to purchase a commercial version.
Most of the viruses and worms on your PC because of visiting pornosites or warez/torrent sites.
DANGEROUS! ANTIVIRUS DETECTED SOME HARMFUL PROGRAMS ON YOUR PC! THEY MAY CORRUPT YOUR INFORMATION OR SEND IT TO HACKERS.
PLEASE, OPTIMIZE YOUR PC. IT RUN ONLY 10%.
A common for parasites this one is not an exception because it also has an ability to hijack your web browser to deceptive websites that market the “full” version of Antivirus program. Do not fall for this fraud. Information is malicious and fraudulent. Use a decent anti-spyware application and terminate Antivirus as soon as it is notices. Make sure you delete it and all its affiliated components.
How to get rid of Antivirus
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Antivirus and the latest internet security threats. If your computer is infected with Antivirus we strongly recommend automatic spyware scanner.
How to manually remove Antivirus
To get rid of spyware such as Antivirus you need to remove processes, search and delete registry keys, DLL and other Antivirus related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Antivirus remover.
- Uninstall Antivirus from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these Antivirus processes:
wscsvc32.exe
wmsdk64_32.exe
troj000.exe
spam003.exe
spam001.exe
Uninstall.exe
avt.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Unregister Antivirus DLL files:
avthook.dll
avtext.dll
To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll" -
Delete Antivirus registry entries:
HKEY_CURRENT_USER\Software\Malware Defense
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\AnVi
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "wmsdk64_32.exe"
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these Antivirus related files:
c:\Program Files\AnVi\
c:\Program Files\AnVi\about.ico
c:\Program Files\AnVi\activate.ico
c:\Program Files\AnVi\avt.db
c:\Program Files\AnVi\avt.exe
c:\Program Files\AnVi\avtext.dll
c:\Program Files\AnVi\avthook.dll
c:\Program Files\AnVi\buy.ico
c:\Program Files\AnVi\help.ico
c:\Program Files\AnVi\scan.ico
c:\Program Files\AnVi\settings.ico
c:\Program Files\AnVi\splash.mp3
c:\Program Files\AnVi\Uninstall.exe
c:\Program Files\AnVi\update.ico
c:\Program Files\AnVi\virus.mp3
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus.lnk
%UserProfile%\Desktop\Antivirus Support.lnk
%UserProfile%\Desktop\Antivirus.lnk
%UserProfile%\Desktop\nudetube.com.lnk
%UserProfile%\Desktop\pornotube.com.lnk
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\youporn.com.lnk
%UserProfile%\Local Settings\Temp\wmsdk64_32.exe
%UserProfile%\Local Settings\Temp\wscsvc32.exe
%UserProfile%\Start Menu\Programs\AnVi\
%UserProfile%\Start Menu\Programs\AnVi\About.lnk
%UserProfile%\Start Menu\Programs\AnVi\Activate.lnk
%UserProfile%\Start Menu\Programs\AnVi\Antivirus Support.lnk
%UserProfile%\Start Menu\Programs\AnVi\Antivirus.lnk
%UserProfile%\Start Menu\Programs\AnVi\Buy.lnk
%UserProfile%\Start Menu\Programs\AnVi\Scan.lnk
%UserProfile%\Start Menu\Programs\AnVi\Settings.lnk
%UserProfile%\Start Menu\Programs\AnVi\Update.lnk
August 4th, 2010 10:08
[...] is a dubious application which can be found in a different name such as Antivirus. The main purpose of the rogue is to gain user to buy its fake registered version. The application [...]
January 11th, 2011 10:21
[...] is a fake anti-spyware application which is an Antivirus scam as well. It spreads via trojan horse which enters the system via its flaws. Malware downloads [...]