Remove Nortel Antivirus | Nortel Antivirus Removal Guide

Bookmark and Share

Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. »Download

www.OnlineComputerRepair.org can remove this threat for you right now. Cost is $89.99

Nortel Antivirus Removal
Nortel Antivirus

» Download Nortel Antivirus Virus Removal Software

Nortel Antivirus is your basic fake security program.  This will only show fake scan results and the program is not to be trusted.  This client is well known for blocking security client updates by changing the users HOSTS file at  %System%\drivers\etc\hosts  in order to disable access to many security websites:  If you are unable to update your current security software that it why.  You can always open it up and remove the traces that are blocking your website.

Most users who get infected with this got it from a fake trojan downloader package.  Once the user is infected this trojan will then go out and download this rouge security client.  If you find yourself infected you can use the below manual guide.  We do suggest you run a full scan using spyware Doctor with antivirus to ensure you are not infected with anything else besides this fake application.

Some symptoms of Nortel Antivirus:

* Bogus Scan results
* Auto Scans on Start-up
* Warning coming out of a fake shield in the system tray
* pop-ups and re-directs to the fake software's website
* constant warnings of being infected as well as false statements of other trojans

<a href=Spyware Doctor with Antivirus Downlaod" />

We do recommend you scan your computer with the free trial of Spyware Doctor with Antivirus to see how infected you really are. If it is just this fake security product then follow the manual directions below. If you have other trojans and spyware applications then consider making a purchase of Spyware Doctor with Antivirus Here to remove all other threats and to keep your PC secure. If you follow the link above and use coupon code removevirus10 you will get 10% off. This is an exclusive coupon we got just for our readers.

As well we do recommend this remote computer support company. They are the leaders in remote computer repair and can have you up and going in no time at all. This option is more for people who don't feel comfortable removing viruses by themselves and just want an expert to do it for them.

Manual removal instructions for Nortel Antivirus ( Please read our disclaimer bellow )

Kill Nortel Antivirus processes: ( Learn How to Kill a Process Here. Opens in new Window )

  • WinAvXX.exe
  • wox.exe
  • mrgdll.exe

We do recommend you run a full scan using Spyware Doctor with Antivirus » download. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You may need this if it mutates.

Delete Nortel Antivirus registry values: ( Learn How to Edit Registry Here. Opens in new Window )

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[RANDOM NAME]" = "C:\ProgramData\nol\mrgdll.exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[RANDOM NAME]" = "C:\ProgramData\nol\wox.exe"
  • HKEY_CURRENT_USER\Software\wox

Delete files:

  • %UserProfile%\Start Menu\Programs\Startup\system.exe
  • C:\Documents and Settings\All Users\ Start Menu\Programs\Startup\autorun.exe
  • wox.exe
  • mrgdll.exe

Delete directories:

  • C:\ProgramData\nol\
  • %UserProfile%\Application Data\nol\

Edit your hosts file to remove the blocked sites.

Please keep in mind that viruses mutate and change all the time. Do expect the above to change around a little. However this guide should work well for you and any experienced pro will be able to follow it and figure out the traces if they mutate. If you do not feel comfortable deleting files and the like then consider purchasing Spyware doctor with antivirus or have www.onlinecomputerrepair.org remove this and all other threats for you.

Leading Security Clients for you to consider ( Click the Links Below to Learn More )