Remove Antivir
Removal instructions

Severity scale:  
  (72/100)
Antivir | Type: Rogue Antispyware
Antivir is a misleading anti-spyware application that reports false or exaggerated system security threats and infections to make you think that your computer is infected with malware. Once installed, it will simulate system scans and display a list of infections, but won't let you to remove those supposed infections unless you pay for a full version of the program. As you can see, the main goal of this misleading application is to trick you into purchasing the program. This is nothing more but a scam. Do not pay for it and uninstall Antivir from your computer as soon as possible.

Antivir graphical user interface
[Figure 1. Antivir graphical user interface]

Antivir is promoted through the use of Trojans that come mostly from fake online anti-malware scanners. Of course, the scammers use other misleading methods to promote their bogus product. Social engineering is very popular distribution method too. You shouldn't accept invitations or open links received from unknown people. When installed, Trojans download rogue application and displays fake security alerts. Those fake security alerts or notifications will state that your computer is infected, for example: "Warning! Identity theft attempt detected". Other fake notification states:


Trojan:W32/Inject Activity Detected
Trojan:W32/Inject is a large family of malware that secretly makes changes to the Windows Registry. Variants in the family make also makes changes to other running processes.


Antivir - fake alert
[Figure 2. Antivir - fake alert]

To make things worse, Antivir will hijack Internet Explorer and display "Warning! Visiting this site may harm your computer!" message [Figure 3].

Antivir - fake Internet Explorer warning
[Figure 3. Antivir - fake Internet Explorer warning]

Further more, Antivir may block legitimate anti-spyware software and block security related websites. There shouldn't be any doubts about this bogus application - it must be removed upon detection. Most importantly, do not purchase Antivir. Otherwise, you will simply lose your money. If your computer is infected with this malware, please use the removal guide below to remove Antivir manually for free. Also make sure to scan your PC with a legitimate anti-spyware application to remove the remains or additionally installed malware. Related files: Antivir.exe, Antivir.lnk, uninstall.lnk

Antivir properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Antivir removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Antivir you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
remover for Antivir Happiness
Guarantee
Compatible with Microsoft
Spyware Doctor is recommended remover to uninstall Antivir. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Antivir using Spyware Doctor, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

STOPzilla
Tested and Confirmed! STOPzilla removes Antivir (2009-11-27 01:28:41)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Antivir (2009-11-27 01:28:41)
SpyHunter
We are testing SpyHunter's efficiency at removing Antivir (2012-06-05 11:00:10)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Antivir (2012-06-05 11:00:10)
Virus Removal Phone Support
1-877-657-9614
Help Line to remove Antivir

Antivir manual removal

Kill processes:
antivir.exe
Delete registry values:
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
Unregister DLLs:
UpdateCheck.dll

Delete files:
antivir.exe
UpdateCheck.dll
Antivir.lnk
Uninstall.lnk

Delete directories:
C:\Program Files\AV
C:\Program Files\Common Files\Uninstall
C:\Program Files\Common Files\Uninstall\AV
C:\Documents and Settings\All Users\Start Menu\AV

Geolocation of Antivir

This map reveals the prevalence of Antivir. Countries and regions that have been affected the most are: Germany, Austria, Madagascar, Switzerland and Cameroon.

QR code for Antivir removal instructions

Antivir qrcode QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like Antivir are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Antivir right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.

Information added: 2009-11-27 01:28
Information updated: 2012-06-05 08:22

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Users comments about Antivir:

0
0
[email protected]
This is so well done,I have sat up all night running AVG thinking I had a big problem,it attempts to stop you doing anything else but buy their product.
22 serious infections would worry anyone..it did me,until I noticed the security screen was on their HTML..people should be warned.
0
0
<Guest>
yeah I just got hit with this. Hopefully I'll be able to get rid of it. If not we could have some major issues.
0
0
<Guest>
Thank you so much for the information. It was very helpful on fixing my problem.
0
0
<Guest>
I'm glad I saw this. I got rid of it, but it took 2 hours from my life. I hope people see that this is a scam. Thanks.
0
0
<Guest>
I'm going to try this when I get home. I'm glad there are people to help with this. Thanks so much.
0
0
pissedoff
THANK YOU for this helpful information! can't believe i fell for it..
oh well.. who wouldn't worry when a window pops up saying you've got 365 trojans?! O_O

i really really hope something will be done about this scam.
thanks again for the info. :)
0
0
Gaz1155
Thanks for all the info guys, i got hit by this also and am in the process of getting rid of it. These guys should be sued!!!
0
0
<Guest>
Thanks for the information you guys that was really helful i just got rid of this antivir. I still can;t believe that i almost fell for this.
0
0
<Guest>
I need help i dont understand how to remove it please this is very annoying.
0
0
<Guest>
i got hit by this and still no luck with me theyre so dumb and ignorant... they mispelled want when it says what do you whant to do?... good thing i didnt fall this just hope to get rid of it asap
0
0
<Guest>
i hope thi sworks. couldn't believe I fell for this one. good tp know there's a cure.
0
0
<Guest>
Very helpful. It looks like it solved the problem.
0
0
<Guest>
Thanks very much. I would like to echo what others have said, and hope those responsible are caught and dealt with.
0
0
<Guest>
Man im glad i found this site.t his shit was pissin me off. it really did hijack my browser... grrrr. i hope this site really helps me get rid of it!!
0
0
<Guest>
there was another copy of this bugger located in:
C:Documents and SettingsAll UsersStart Menu
0
0
<Guest>
Thanks...I hope this works.
0
0
<Guest>
Thanks for the advise - Windows Defender got rid of it.
0
0
<Guest>
Thank you so much for this advice! I saw this and thought it to be a scam. However it really did hijack my browser. I installed Spyware doctor and it got rid of the little bugger. Thank goodness!
0
0
<Guest>
I knew something was wrong when it said that everyhting normal was a trojan. Stupid piece of work. It just didn't seem right that they forced you to buy their scam.
0
0
<Guest>
I worked great for me. Found 8 infections
More comments...

Post Comment

Attention: Use this form only if you have additional information about Antivir parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)
Like us on Facebook
News
Subscribe
Ask us
Parasites
Tags
Files
What's your antispyware?
Compare
I failed to remove Antivir using Spyware Doctor.

Email


Close
add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!