AntiVira AV is a FALSE security client and a direct clone of Antivirus .net and Antivirus Scan. The purpose of this software is to show false scan results to trick the user into making a purchase of the program.
How did I get in Infected with AntiVira AV“
AntiVira AV normally installs on a persons computer through a trojan virus, a malisious or unsecured website, the user may of been tricked to install this software because they thought it was a vodeo codec or software update.
Once installed on a users computer AntiVira AV wil often times disable the Task Manager and other legitimate antivirus clients. It may also stop many programs from opening. Bascially it will try to hold your computer for ransom.
AntiVira AV
» Download AntiVira AV Removal Software
If AntiVira AV is installed on your computer you must take imediate action to remove AntiVira AV. You also need to run a full virus scan to ensure you are not infected with anything else.
Remove Proxy Setting so You Can Connect to the Internet Again.
How to Remove AntiVirus 2011 Manually
You will have to kill the following process(s) first as the initial step to remove AntiVira AV:
{RANDOM}.exe
The main executable of this threat is random. This makes removing such threats that much harder. The threat is normally found in the %LOCALAPPDATA%\ folder
If the manual AntiVira AV removal procedure seems a bit too complicated to handle, you can always go for some professional assistance to delete AntiVira AV from your machine.
Remove AntiVira AV: Cleaning the Registry
Once you are done with deleting the files listed above, don’t forget to clean your registry. You might have to get rid of the following files:
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter | “Enabled” = “0″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyOverride” = “”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyServer” = “http=127.0.0.1:30215″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyEnable” = “1″
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | {RANDOM}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | {RANDOM}
It is recommended that you run a full virus scan of your machine to make sure that it is completely free of all sort of threats including AntiVira AV. For the scan, we suggest using Spyware Doctor with Antivirus.
AntiVira AV Directories:
XP
- %Temp%\{RANDOM}\
Windows 7 / Windows Vista
- %AppData%\{RANDOM}\
Outside Resources:
http://www.bleepingcomputer.com/virus-removal/remove-antivira-av
Speak Your Mind