Title: AntiMalware
Also known as: Anti Malware

Remove AntiMalware
Removal instructions

 
Severity scale:AntiMalware severity is 72  (72 / 100)
 
AntiMalware is a misleading application that reports false infections/system security threats, displays fake security alerts, uses browser hijacking and other methods to trick you into believing that your computer is infected with Trojans, Worms and other viruses. This misleading application is a clone of the rogue security program called Active Security. So, obviously it has many similarities with Active Security malware. AntiMalware is promoted mostly through the use of Trojans that comes from fake online scanners, fake online video websites or bundled with other malicious software. When running, the rogue program will perform fake system scans and then prompt you to pay for a full version of the program to remove the threats which do not actually exist. This is a scam; do not purchase this bogus application. Instead, uninstall AntiMalware from your computer as soon as possible.

AntiMalware graphical user interface
[Figure 1. AntiMalware graphical user interface]

Once installed, AntiMalware rogue will be configured to start automatically each time you log on into Windows. The rogue program will display numerous infections and security threats but won't let you remove them unless you first purchase the program. The reported infections are fake, but use real names. The list of reported infections:

Rootkit.Win32.Agent.ppTrojan.Win32.Agent.dcc
Trojan-Clicker.HTML.IFrame.gVirus.Win32.Hala.a
Trojan-Downloader.JS.Multi.caTrojan-Dropper.Win32.Small.go
Trojan-Clicker.Win32.Tiny.aEmail-Worm.Win32.NetSky.q
Backdoor.Win32.Kbot.alTrojan-Spy.Win32.Iespy.od
Trojan-PSW.Win32.Hangame.cpTrojan-Clicker.Win32.Agent.bm
Net-Worm.Win32.Mytob.tTrojan-Clicker.Win32.NetBuie.b
Virus.Win32.Gpcode.akTrojan-Downloader.HTML.Agent.aq
Backdoor.Win32.Agent.ichTrojan-Downloader.VBS.Agent.cd
Trojan-Dropper.Win32.CheckinTrojan-Dropper.Win32.Agent.sd
Trojan-Downloader.Win32.Agent.alrTrojan-Downloader.NSIS.Agent.a
Trojan-Dropper.Win32.VB.orNet-Worm.Win32.DipNet.d

To make things even worse, AntiMalware will block anti-virus software and even try to uninstall some of them. The rogue will attempt to uninstall NOD32 Antivirus, Kaspersky, AVG, BitDefender, avast!, Avira AntiVir, Sophos and other antivirus software. Furthermore, it will constantly display fake security alerts and notifications about supposedly detected harmful programs on your computer, network attacks, keyloggers and very dangerous viruses that may steal private information.

AntiMalware fake security alerts
[Figure 2. AntiMalware fake security alerts]


AntiMalware network security alert
Network attack rejected!
Your computer is being attacked from remote host. Attack has been classified as Remote code execution attempt.

Timely AntiMalware removal is very important as this misleading application is able to download and install additional malware onto your computer. It may block System Restore, Task Manager and even disable safe mode. As you can see, this malware is quite dangerous. Most importantly, do not purchase it. If you have already done that, please contact your credit card company and dispute the charges. Please use the removal guide below to remove AntiMalware from your computer manually for free. And last, but not least, scan your PC with a legitimate anti-spyware application to make sure if the system is not infected with other malware.

Related files: creg.dat, 4otjesjty.mof, c.dat, 2pkmerkxt.mof, Uninstall AntiMalware.lnk, AntiMalware Support.lnk, Uninstall.exe, malw.db, help.ico, amext.dll, antimalware.exe

AntiMalware properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic AntiMalware removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove AntiMalware you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall AntiMalware. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of AntiMalware and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove AntiMalware using SpyHunter, submit question to our support team and provide as much details as possible.
dot
STOPzilla
download
manual required
Tested and Confirmed! STOPzilla removes AntiMalware (2009-11-10 04:59:01)
dot
Malwarebytes Anti Malware
download
manual required
Tested and Confirmed! Malwarebytes Anti Malware removes AntiMalware (2009-11-10 04:59:01)
dot
XoftSpySE Anti Spyware
download
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing AntiMalware (2011-07-14 10:44:41)
dot
Defender Pro Ultimate
download
manual required
We are testing Defender Pro Ultimate's efficiency at removing AntiMalware (2011-07-14 10:44:41)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove AntiMalware
AntiMalware snapshot:

AntiMalware manual removal:

Kill processes:
antimalware.exe
uninstall.exe
Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Active Security
HKEY_LOCAL_MACHINE\SOFTWARE\AntiMalware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiMalware
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AntiMalware"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
Unregister DLLs:
amext.dll

Delete files:
antimalware.exe
amext.dll
help.ico
malw.db
uninstall.exe
AntiMalware Support.lnk
Uninstall AntiMalware.lnk
4otjesjty.mof
c.dat
creg.dat
Delete directories:
C:\Program Files\AntiMalware
C:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware
%Temp%\

QR code for AntiMalware removal instructions:

AntiMalware qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like AntiMalware are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall AntiMalware right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2009-11-10 04:59:01
Information updated: 2011-07-14 08:07:26

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

0
0
Hare Krishna Hare Rama
Great Information Thanks a Lot. I Suspected Antimalware.
Hare Krishna Bless you.
0
0
Robin
- antimalware.exe and uninstall.exe may not appear in the process list. Then you have to kill *32.exe process.
- amext.dll may be locked for deletion. In this case rename it and move it to desktop. After the next reboot, delete it.
- 4otjesjty.mof c.dat creg.dat may not be found on the system.
0
0
<Guest>
wow thank you hahah
0
0
<Guest>
Dude,

This excty what happened to me, fortunately I didn't purchase the software. This is very helpful info. Thanks a lot.
0
0
<Guest>
Thank you for this information.
I appreciate this immensely it was very useful
0
0
an
This Antimalware is really a SCAM. Charged by Realgoldsoft BAKU AZ. Contact your credit card company as soon as possible and file a disputer letter.
0
0
<Guest>
how do you remove this antimalware from computor
0
0
<Guest>
says a lot but not how to remove it. I need to know how to remove it
0
0
<Guest>
I didn't purchase, but my other computer still died. I'm sunk.
0
0
<Guest>
NONE of those things are on my computer and yet I still have the stupid thing. Please is there anymore info?
0
0
<Guest>
can someone please explain the steps needed to delete the spyware, I did not purchase it. Somehow it just showed up
0
0
<Guest>
couldn't be totally removed by above instructions and instructions from other website, then downloaed free anti-malfare software, fixed.
0
0
<Guest>
download has viruses
0
0
mitch
your information is very useful if you can see the screen; in safe mode I have attempted to enter my computer but cannot see any information. the screen is dark and I am unable to resaolve this? any suggestions for this besides taking my computer to a PC store??
0
0
<Guest>
cant anyone report this malware and ban it??? if so plz do
0
0
<Guest>
How can i trust your information here
0
0
<Guest>
I got this program on my computer somehow and its HORRIBLE! I've tried all sorts of ways to delete it and its just not working. I even tried going through their "customer service" only to be told that a phone number is only available for "authorized customers".

I CANT GET IT OFF! HELP PLEASE!
1
0
<Guest>
Hello I cannot get into the into the internet to download this. Right now I am using my iPod. All this could be useless if I can't get online. What do I do?!?!?!
1
0
kavita
Hi all,
antimalware was installed on my system..and provided various warning messages to found virus in my system. first i tried to uninstall that program but i was unsuccessful to do it. so i deleted the folder from the system. am not sure at the moment does it made registries in the file or these four files n folder are seems to be modified..am not sure how to delete its entries from the files
location: C:UserskavitaAppDataRoaming2979AC4FC8261B22885531146DD58937
0
0
fuck you antimalware
i cant get it off i tried all the ways to delete it but its not die
i deleted alll the stuff from my computer i used malwarebites smn help meeeeeeeeeeeeeeeeee im gonna been killed
0
0
Keith
II have used malware in my computer for the past 5 or so years and have no problems with it. I have just uninstalled mine and put an other virsion in. So I do not know what all the fuss is over malware,All these problems you seem to be having seems to me that you are running to many anti virus malware and spy ware at the same time and causing conficts,this was explained to me I have had no problems.
0
0
Marc
I installed it. I purchased it. It worked fine. Scanned twice in two months and found malware which was confirmed by another malware program. Ran it three more times with no malware found. If they are that disreputable, wouldnt it find at least something to keep you hooked?
My only reason for coming to this forum was to see if I could disable auto startup and change to manual - could not through services. I uninstalled it for one reason only, it was memory intensive. I had NO issues uninstalling so I do not understand all the fuss. Perhaps this author is promoting his own wares? Activeris is still in business, same website everything - a scammer could not have lasted years like this with the same software and upgrades.
0
0
Samson
I approve of patio doors in Salt Lake City they look great sticking out of the back of a house.

Post Comment:

Attention: Use this form only if you have additional information about AntiMalware parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48451 Subscribers
Ask us
I failed to remove AntiMalware using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other