|
Title: Antivir
Type: Rogue Antispyware
Remove Antivir. Removal instructions
Severity scale:
 (72 / 100)
 [Figure 1. Antivir graphical user interface] Antivir is promoted through the use of Trojans that come mostly from fake online anti-malware scanners. Of course, the scammers use other misleading methods to promote their bogus product. Social engineering is very popular distribution method too. You shouldn't accept invitations or open links received from unknown people. When installed, Trojans download rogue application and displays fake security alerts. Those fake security alerts or notifications will state that your computer is infected, for example: "Warning! Identity theft attempt detected". Other fake notification states: Trojan:W32/Inject Activity Detected Trojan:W32/Inject is a large family of malware that secretly makes changes to the Windows Registry. Variants in the family make also makes changes to other running processes.  [Figure 2. Antivir - fake alert] To make things worse, Antivir will hijack Internet Explorer and display "Warning! Visiting this site may harm your computer!" message [Figure 3].  [Figure 3. Antivir - fake Internet Explorer warning] Further more, Antivir may block legitimate anti-spyware software and block security related websites. There shouldn't be any doubts about this bogus application - it must be removed upon detection. Most importantly, do not purchase Antivir. Otherwise, you will simply lose your money. If your computer is infected with this malware, please use the removal guide below to remove Antivir manually for free. Also make sure to scan your PC with a legitimate anti-spyware application to remove the remains or additionally installed malware. Related files: Antivir.exe, UpdateCheck.dll, Antivir.lnk, uninstall.lnk Antivir properties: • Changes browser settings • Shows commercial adverts • Connects itself to the internet • Stays resident in background Automatic Antivir removal: 
Tested and Confirmed! Malwarebytes Anti Malware removes Antivir (2009-11-27 01:28:41)
We are testing Spyware Doctor's efficiency at removing Antivir
(2012-01-14 07:59:33)
Antivir manual removal:Kill processes:antivir.exe Delete registry values: HKEY_CURRENT_USER\Software\EVAACD HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009" Unregister DLLs: UpdateCheck.dll Delete files: antivir.exe UpdateCheck.dll Antivir.lnk Uninstall.lnk Delete directories: C:\Program Files\AV C:\Program Files\Common Files\Uninstall C:\Program Files\Common Files\Uninstall\AV C:\Documents and Settings\All Users\Start Menu\AV 
Information added: 2009-11-27 01:28:41
Information updated: 2012-01-14 05:22:18 Additional resources related to Antivir:Attention: If you know or you have a website or page about Antivir removal, feel free to add a link to this list: add url |
Related news:
Similar parasites:
Related articles:
Related discussions:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
22 serious infections would worry anyone..it did me,until I noticed the security screen was on their HTML..people should be warned.
oh well.. who wouldn't worry when a window pops up saying you've got 365 trojans?! O_O
i really really hope something will be done about this scam.
thanks again for the info. :)
C:Documents and SettingsAll UsersStart Menu
I am not a huge Avira fan, but they are certainly a legitimate and fairly decent antivirus company.
searching for info on Antivir I would have purchased the damn thing. Window
Defender searched and found no infections in my computer. Thank God I
have my iPhone which enabled me to search for some kind of resolution.
I have Vista, and nothing is working... any help?
I can't get onto the internet, its blocking everthing.
Thanks
u can get to the system recovery by going on internet explorer and clicking identify problems or something and then additional options and then system recovery.
Thanks for the help.
I belive this came from yahoo messenger via web client.
On Vista press f8 on startup, choose safe mode, then system restore - worked a treat.
Thanks for this website andmy old apple laptop!
I just used system restore and I can browse the web again, but I still need to delete the program completely.
this is just another name for this type of infection:
Antivirus 2010/2011
XP anti spyware
windows Av
Whateva... I have even seen a fake AVG
Antivir by Avira is one of the Top free AV solutions available and has an Umbrella logo.
What i would like to know is what the heck people are clicking on to get this junk on their PCs in the first place, just think, if you had a mac this would not have happened, however basic tasks might be just that little bit more anoying.
remember all the fake AV and fake PC tuneup SW will want you to pay, and will seem fantastic in their diagnosis.
Post Comment: