Remove Antivir
Removal instructions

Severity scale:  
  (72/100)
Antivir | Type: Rogue Antispyware
Antivir is a misleading anti-spyware application that reports false or exaggerated system security threats and infections to make you think that your computer is infected with malware. Once installed, it will simulate system scans and display a list of infections, but won't let you to remove those supposed infections unless you pay for a full version of the program. As you can see, the main goal of this misleading application is to trick you into purchasing the program. This is nothing more but a scam. Do not pay for it and uninstall Antivir from your computer as soon as possible.

Antivir graphical user interface
[Figure 1. Antivir graphical user interface]

Antivir is promoted through the use of Trojans that come mostly from fake online anti-malware scanners. Of course, the scammers use other misleading methods to promote their bogus product. Social engineering is very popular distribution method too. You shouldn't accept invitations or open links received from unknown people. When installed, Trojans download rogue application and displays fake security alerts. Those fake security alerts or notifications will state that your computer is infected, for example: "Warning! Identity theft attempt detected". Other fake notification states:


Trojan:W32/Inject Activity Detected
Trojan:W32/Inject is a large family of malware that secretly makes changes to the Windows Registry. Variants in the family make also makes changes to other running processes.


Antivir - fake alert
[Figure 2. Antivir - fake alert]

To make things worse, Antivir will hijack Internet Explorer and display "Warning! Visiting this site may harm your computer!" message [Figure 3].

Antivir - fake Internet Explorer warning
[Figure 3. Antivir - fake Internet Explorer warning]

Further more, Antivir may block legitimate anti-spyware software and block security related websites. There shouldn't be any doubts about this bogus application - it must be removed upon detection. Most importantly, do not purchase Antivir. Otherwise, you will simply lose your money. If your computer is infected with this malware, please use the removal guide below to remove Antivir manually for free. Also make sure to scan your PC with a legitimate anti-spyware application to remove the remains or additionally installed malware. Related files: Antivir.exe, Antivir.lnk, uninstall.lnk

Antivir properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Antivir removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Antivir you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
remover for Antivir Happiness
Guarantee
Compatible with Microsoft
SpyHunter is recommended remover to uninstall Antivir. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Antivir using SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

STOPzilla
Tested and Confirmed! STOPzilla removes Antivir (2009-11-27 01:28:41)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Antivir (2009-11-27 01:28:41)
SpyHunter
We are testing SpyHunter's efficiency at removing Antivir (2012-06-05 11:00:10)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Antivir (2012-06-05 11:00:10)
Virus Removal Phone Support
1-877-657-9614
Help Line to remove Antivir

Antivir manual removal

Kill processes:
antivir.exe
Delete registry values:
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
Unregister DLLs:
UpdateCheck.dll

Delete files:
antivir.exe
UpdateCheck.dll
Antivir.lnk
Uninstall.lnk

Delete directories:
C:\Program Files\AV
C:\Program Files\Common Files\Uninstall
C:\Program Files\Common Files\Uninstall\AV
C:\Documents and Settings\All Users\Start Menu\AV

Geolocation of Antivir

This map reveals the prevalence of Antivir. Countries and regions that have been affected the most are: Germany, Austria, Madagascar, Switzerland and Cameroon.

QR code for Antivir removal instructions

Antivir qrcode QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like Antivir are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Antivir right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.

Information added: 2009-11-27 01:28
Information updated: 2012-06-05 08:22

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Users comments about Antivir:

0
0
juneberry
Spyhunter doesnt work and I feel some of the paid and widely marketed anti virus/spyware soft wares could be the source of this extremely harmful virus. Try spybot and malwarebytes. if both cannot remove this virus, then you might need some big help.
0
0
cybersloth
That is a FAKE antivir.

this is just another name for this type of infection:
Antivirus 2010/2011
XP anti spyware
windows Av
Whateva... I have even seen a fake AVG

Antivir by Avira is one of the Top free AV solutions available and has an Umbrella logo.

What i would like to know is what the heck people are clicking on to get this junk on their PCs in the first place, just think, if you had a mac this would not have happened, however basic tasks might be just that little bit more anoying.

remember all the fake AV and fake PC tuneup SW will want you to pay, and will seem fantastic in their diagnosis.
0
0
<Guest>
i used safe mode in windows XP and system restore, this should solve teh problem
0
0
<Guest>
I can't use the internet on the computer that is infected with this antivira software how do i get rid of it on a different computer ?
0
0
<Guest>
Used System Restore twice to get rid of this horrible malware, but now System Restore won't let me go back to a previous date and create a new restore point.
0
0
<Guest>
Thanks a lot for this, I was pretty worried and was about to buy the program when I noticed they were spelling everything incorrectly.
I just used system restore and I can browse the web again, but I still need to delete the program completely.
0
0
<Guest>
Same poster, just used windows defender and it's working fine.
0
0
<Guest>
every one it changes your LAN settings in IE choose autodetect and uncheck everything else
0
0
<Guest>
I now can't go on the internet so I used a friends computer to look it up. What do I do?
0
0
<Guest>
My first ever infection. what a nightmare!
On Vista press f8 on startup, choose safe mode, then system restore - worked a treat.
Thanks for this website andmy old apple laptop!
0
0
<Guest>
It is not the internet's fault these things exist. If the punks who create them were systematically eliminated from the face of the earth the problem would be solved.
0
0
<Guest>
This virus just came out of the blue. By far the most annoying thing I've had to deal with. I was able to get task manager open right away upon a restart, ended the process and run AVG. Hopefully it gets caught the people effected get some kind of justice.
0
0
Akarlin
how do you do a system recovery
0
0
<Guest>
removed sucessfully with malwarebytes, and cannot get sucessufl ie usage afterwards. Tried system restore and that worked, Still came back at my next start up a week or so later.
I belive this came from yahoo messenger via web client.
0
0
<Guest>
Safe mode / System Restore solved the problem on laptop w/ Vista.
Thanks for the help.
0
0
<Guest>
I am having the same issue. I was able to find the location of the antivir but when i go look for it the folder is not even there. I think it is a hidden folder
0
0
<Guest>
guys i restarted my computer and did a system recovery thingy and my computer is fine.
u can get to the system recovery by going on internet explorer and clicking identify problems or something and then additional options and then system recovery.
0
0
<Guest>
easiest way to do anything if u get infected is start ur comp in safemode to start cleanin up stuff
0
0
<Guest>
I have tried everything and nothing works. Can those who have posted and found a solution please post it here.
I can't get onto the internet, its blocking everthing.
Thanks
0
0
<Guest>
it tells me to download spydoctor which is NOT free, what can i use that is free and will get rid of antivir?
More comments...

Post Comment

Attention: Use this form only if you have additional information about Antivir parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)
Like us on Facebook
News
Subscribe
Ask us
Parasites
Tags
Files
What's your antispyware?
Compare
I failed to remove Antivir using SpyHunter.

Email


Close
add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!