Remove Antivir64. Description and removal instructions

 
Title: Antivir64
Also known as: Antivir64, Antivir 64
Type: Malware
Severity scale:Antivir64 severity is 66  (66 / 100)
 
Antivir64 is another fake security application. It also appears under name Antivir 64. It spreads through web browsers’ vulnerabilities. The exploits are used to install trojans and download Antivir64. Antivir 64 is not a new program; it is almost identical to other corrupt anti-spyware tools like SpyShredder and PowerAntivirus 2008. It loads fake alerts warning user about numerous infections and offers full version of Antivir64 to remove the threats. Antivir64 may noticeably slow down a computer. Remove this rogue program without hesitation.

Antivir64 reports many fake threats such as Backdoor.SdBot.gen, N-case.win32 and CoolWebSearch(CWS).win32. If pop-ups related to these infections appear on a computer, it's a clear sign of Antivir 64 malware. It may redirect web browser to Scanner.Antivir64.com regularly to push a user into purchasing this application. Do not trust Scanner.Antivir64.com website and block it using your HOSTS file.


Related files: Support Page.lnk, Start Antivir64.lnk, Purchase License.lnk, spline.dat, Desc.dat, base2.dat, base.dat, Antivir64.ini, Antivir64, Antivir64.lnk, license.txt, ID.dat, HowToBuy.txt, help.url, Buy.url

Antivir64 properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Antivir64 removal:

remover for Antivir64

Antivir64 manual removal:

Kill processes:
Antivir64.exe Antvrs.exe Uninstall.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “%ProgramFiles%\Antivir64\Antvrs.exe”
Unregister DLLs:
%ProgramFiles%\\[RANDOM NAME]\\MFC71.dll %ProgramFiles%\\[RANDOM NAME]\\MFC71ENU.DLL %ProgramFiles%\\[RANDOM NAME]\\msvcp71.dll %ProgramFiles%\\[RANDOM NAME]\\msvcr71.dll %ProgramFiles%\\[RANDOM NAME]\\shlwapi.dll %ProgramFiles%\\[RANDOM NAME]\\wininet.dll

Delete files:
c:\\Program Files\\Antivir64\\Buy.url c:\\Program Files\\Antivir64\\Help.url c:\\Program Files\\Antivir64\\HowToBuy.txt c:\\Program Files\\Antivir64\\ID.dat c:\\Program Files\\Antivir64\\License.txt %UserProfile%\\Desktop\\Antivir64.lnk %UserProfile%\\Application Data\\Antivir64 %UserProfile%\\Application Data\\Antivir64\\Antivir64.ini %UserProfile%\\Application Data\\Antivir64\\base.dat %UserProfile%\\Application Data\\Antivir64\\base2.dat %UserProfile%\\Application Data\\Antivir64\\Desc.dat %UserProfile%\\Application Data\\Antivir64\\spline.dat c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64 c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Purchase License.lnk c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Start Antivir64.lnk c:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivir64\\Support Page.lnk
Delete directories:
c:\Program Files\Antivir64

Other programs to remove Antivir64:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 25/08/08
Information updated: 15/10/08

Additional resources related to Antivir64:

Attention: If you know or you have a website or page about Antivir64 removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Antivir64 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: