If You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Description: Earth Antivirus is a rogue anti-malware application related to the well-known rogue programs Green AV and Eco Antivirus, which tries to trick users into paying for a software license that is practically useless. This rogue program uses Trojans that get downloaded from fake online scanners and malicious websites to reach the user’s system. Once established on the user’s computer, Earth Antivirus will load itself up as a startup service and perform a large number of fake scans on the system, which will in turn show that the system is infected with dangerous viruses that don’t really exist. Earth Antivirus also goes as far as to show fake security warning pop-ups from the Windows Taskbar, and the realistic looking GUI also helps to create the illusion that this is a legitimate program.
The aim of all this activity is try and push the user into purchasing a license for the ‘full’ version of Earth Antivirus under the impression that the currently installed ‘trial’ version is incapable of scanning or cleaning the detected ‘viruses’. However, it is important to remember not to fall for this trick as no version of Earth Antivirus is capable of scanning or cleaning your system.
Earth Antivirus
» Download Earth Antivirus Removal Software
As soon as you find a copy of Earth Antivirus on your system, you should initiate Earth Antivirus removal. In order to delete Earth Antivirus, you need to stop its running processes, unregister its DLL files, delete its files and folders and remove its registry entries.
Automatic Earth Antivirus Removal
Online Earth Antivirus Removal Service
Earth Antivirus Manual Removal Procedures
The first step you need to take in order to remove Earth Antivirus is to stop the following processes:
- ergui.exe
- ErV_paid.exe
- eav.exe
- msdl.exe
- vec.exe
Next, it is necessary to unregister the following DLL files:
- gsl.dll
- WStech.dll
The next step in Earth Antivirus removal is to delete the following files and folders:
Windows XP:
- %Documents and Settings%All UsersStart MenuProgramsEarth AV
- %Documents and Settings%All UsersDesktopEarth AV.lnk
- %Documents and Settings%All UsersApplication DataEarth AV
- c:Documents and SettingsAll UsersApplication Dataeav
- c:Documents and SettingsAll UsersApplication DataeavBase.dat
- c:Documents and SettingsAll UsersApplication Dataeavmsdl.exe
- c:Documents and SettingsAll UsersApplication Dataeavmsll.exe
- c:Documents and SettingsAll UsersApplication Dataeavvec.exe
- c:Documents and SettingsAll UsersApplication DataMicrosoftMachine
- c:Documents and SettingsAll UsersApplication DataMicrosoftMachineWStech.dll
- c:Documents and SettingsAll UsersStart MenuPrograms Earth AV
- c:Documents and SettingsAll UsersDesktop Earth AV .lnk
- %APPDATA%mozillafirefoxprofiles\gsl.dll
- ergui.exe
- ErV_paid.exe
Windows Vista/7:
- %Documents and Settings%All UsersStart MenuProgramsEarth AV
- %Documents and Settings%All UsersDesktopEarth AV.lnk
- %Documents and Settings%All UsersApplication DataEarth AV
- %USER%AppDataeav
- %USER%AppData eavBase.dat
- %USER%AppData eavmsdl.exe
- %USER%AppData eavmsll.exe
- %USER%AppData eavvec.exe
- %USER%AppData MicrosoftMachine
- %USER%AppData MicrosoftMachineWStech.dll
- %USER%DocumentsStart MenuPrograms Earth AV
- %USER% Desktop Earth AV .lnk
- %APPDATA%mozillafirefoxprofiles\gsl.dll
- ergui.exe
- ErV_paid.exe
After the above steps have been completed, Earth Antivirus no longer exists on your hard disk. While taking the necessary steps to ensure the fact that no other malicious softweare resides on the PC it is recommended to scan the entire PC using genuine antivirus software such as Spyware Doctor with Antivirus.
If you find this threat too hard to remove yourself and need an expert we recommend www.pcninja.com . They charge far less than others and are great at what they do.
Earth Antivirus Registry Removal Procedures
File removal alone is not sufficient to completely delete Earth Antivirus. The following keys and settings need to be deleted from the Windows Registry in order to ensure complete Earth Antivirus Removal:
- HKEY_CURRENT_USERSoftwareEarth AV
- HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun “Earth AV”
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallEarth AV
- HKEY_CURRENT_USERSoftwareEAV
- HKEY_CLASSES_ROOTAppID{29256442-2C14-48CA-B756-3EE0F8BDC774}
- HKEY_CLASSES_ROOTAppIDWStech.DLL
- HKEY_CLASSES_ROOTCLSID{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
- HKEY_CLASSES_ROOTInterface{051C9A06-FB08-486F-B09B-8B33B261637D}
- HKEY_CLASSES_ROOTTypeLib{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
- HKEY_CLASSES_ROOTWStech.WStechB
- HKEY_CLASSES_ROOTWStech.WStechB.1
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
- HKEY_LOCAL_MACHINESYSTEMControlSet002ControlClass{4D36E96E-E325-11CE-BFC1-08002BE10318}S
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "mxcll"
Now it is safe to say that Earth Antivirus has been completely removed from your computer.
Earth Antivirus Directories:
- Vista and Windows 7 Users: %USER%AppData eav
- XP Users: c:Documents and SettingsAll UsersApplication Dataeav
Conclusion
It is not recommended for inexperienced users to attempt to remove Earth Antivirus manually, as any mistake made during removal could result in the Operating System being damaged permanently. In order to prevent this, inexperienced users should use a web-based repair service such as www.pcninja.com or legitimate antivirus software such as Spyware Doctor with Antivirus to remove Earth Antivirus safely.
Related Article Keywords: Earth Antivirus, Remove Earth Antivirus, Earth Antivirus Removal, How to Remove Earth Antivirus
See our Antivirus Software Reviews for other security clients that we like.
