NEWS
PARASITES
SOFTWARE
FORUM
DIRECTORY

 
 
 
 
 
 
  
Title: Antivirus Action
Type: Rogue Antispyware
Also known as: AntivirusAction

Remove Antivirus Action
Removal instructions

by
 
Severity scale:Antivirus Action severity is 89  (89 / 100)
 
Antivirus Action is a high-risk rogue spyware which appears to be created after its “famous” forerunner Security Suite which is known to have infected thousands of PCs. Antivirus Action is presented as a critical malware not only for typical malicious capabilities, like its secret infiltration, annoying system scanners or fake alerts. This scamware is also capable enough to disable users from the Internet, block all security software detected and let more other viruses inside. Antivirus Action will ask your specialized capabilities when you try to remove it because it is not removable through standard uninstall option.

Being distributed through fake video codecs or misleading online scanners, AntivirusAction additionally starts its misinformation stage where infected system is completely bombarded by virus detection alerts. These notifications continuously interrupt when people browse the web, and every time they appear they declare about numerous viruses detected, for example:


Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.



Security Warning
Application cannot be executed. The file notepad.exe is infected. Do you want to activate your antivirus software now.


Antivirus Action strategy is clear and obvious: being a commercial project it asks paying the money for its so-called services and offers you to update to Antivirus Action Lite, Antivirus Action Standart or Antivirus Action Ultimate. However, this scam has no spyware detection or removal engine, so won’t be able to remove any computer virus. In addition to the above mentioned facts, this virus has a great impact on the computer’s performance, so you should eliminate it as soon as it gets on your computer. It’s highly recommended to use a reliable anti-spyware and remove Antivirus Action with all its additional files.

NOTE:

When trying to eliminate this scam, you may find yourself disabled from the Internet. Here are some special notes to bring it back and remove Antivirus Action:

1. Restart your computer. As your computer restarts but before Windows launches, tap "F8" key constantly. Use the arrow keys to highlight the "Safe Mode with Networking" option as shown in the image below, and then press ENTER.




2. Open Internet Explorer. Click on the Tools menu and then select Internet Options.



3. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.



4. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.



5. Download an automatic removal tool from this page and run a full system scan. Or download it form alternative location.




Related files: %UserProfile%Local SettingsApplication Data[random characters][random characters]agnz.exe, %Documents and Settings%All UsersApplication DataAntivirus Action, %Documents and Settings%All UsersDesktopAntivirus Action.lnk, %Documents and Settings%All UsersStart MenuProgramsAntivirus Action, Antivirus Action, Antivirus Action.lnk, [random characters]agnz.exe

Antivirus Action properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Antivirus Action snapshot:
Antivirus Action removal

Automatic Antivirus Action removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Antivirus Action you agree to our privacy policy and agreement of use.
remover for Antivirus Action
SpyHunter is recommended remover to uninstall Antivirus Action. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Antivirus Action and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Antivirus Action using SpyHunter please report this to us.
Malwarebytes Anti Malware
Download | review
Tested and Confirmed! Malwarebytes Anti Malware removes Antivirus Action (2010-10-11 06:23:09)
STOPzilla
Download | review
Tested and Confirmed! STOPzilla removes Antivirus Action (2010-10-11 06:23:09)
Spyware Doctor
Download | review | tutorial
We are testing Spyware Doctor's efficiency at removing Antivirus Action (2011-07-18 20:44:42)
XoftSpySE Anti Spyware
Download | review

Antivirus Action manual removal:

Kill processes:
%UserProfile%Local SettingsApplication Data[random characters][random characters]agnz.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USERSoftwareAntivirus Action
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun ??Antivirus Action??
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallAntivirus Action
HKEY_CURRENT_USERSoftware[random characters]
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = ""
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random characters] gnz.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "[random characters]agnz.exe"
HELP:
how to remove registry entries

Delete files:
%Documents and Settings%All UsersStart MenuProgramsAntivirus Action
%Documents and Settings%All UsersDesktopAntivirus Action.lnk
%Documents and Settings%All UsersApplication DataAntivirus Action
%UserProfile%Local SettingsApplication Data[random characters][random characters]agnz.exe



HELP:
how to remove harmful files
Phone Support to remove Antivirus Action
Phone Support to remove Antivirus Action

QR code for Antivirus Action removal instructions:

Antivirus Action qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Antivirus Action are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Antivirus Action right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

SYMPTOMS OF rogue antispyware INFECTION

Rogue AntiSpyware virus enters your PC without your consent or using some sort of social engineering trick. Fake scanner pages, malicious mail attachments or system vulnerabilities are often used. 

Virus has a single goal: to gain money. Like other rogue anti-spyware applications, it will try to convince you that your system is infected with multiple parasites: trojans, adware, or other rogues. Typically, rogues do not provide enough detail about infections detected or show fake results. Rogue anti-spyware like Antivirus Action will not clean any actual infections for free.

Most of the parasites of this type do not have parasite detection engine thus every warning they show is a random one. If you see persistent popups or alerts, you can safely discard them. 

You should never pay for Rogue Anti-spyware application like Antivirus Action as it funds development of other computer parasites.

Information added: 2010-10-11 06:23:09
Information updated: 2011-07-18 18:07:27

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url
more resources
0
0
<Guest>
great. hope it works for me!
2010 10 14
0
0
<Guest>
Thank you so much.It worked beautifully.
2010 10 17
0
0
<Guest>
what if your computer wont launch in safe mode?
2010 10 18
0
0
<Guest>
thank You :) The bastard seem to be gone !
2010 10 18
0
0
<Guest>
aw man. I wish i had seen this 3 hours ago. I had this stupid virus and i just did a complete system restore.. probably losing my english essay. I'll definitely bookmark this page in case i get it again. Thanks!!!
2010 10 18
0
0
<Guest>
thank god it's a virus.. I tought I fck up my computer i don'T know how..!
GOD thank yoU!
2010 10 19
0
0
<Guest>
god bless man i thoght id never get rid of it
2010 10 20
0
0
<Guest>
A MILLION THANKS!
2010 10 23
0
0
<Guest>
I am SO glad that thing is gone! It was like having a bulbous pulsating tumor at the end of my dick that wouldn't let me take a piss. Thankyou SO MUCH!
2010 10 23
0
0
<Guest>
if safemode won't work, when your computer starts quickly go into task mananger (ctrl alt delete) and look for a task that's running which shouldn't be. For me it was elciqnjdlta.

Once you've done that you can just take these steps as said above
2010 10 26
0
0
<Guest>
I did everything stated above, purchase the PC Tools Spyware Doctor, and ran the Spyware Doctor program, and Antivirus Action is still on my computer. HELP!
2010 10 29
0
0
<Guest>
Did everything and I STILL HAVE IT! HELP!!!!!!!!!
2010 11 01
0
0
kill the bastard
im too had this shit antivirus action, and had locked my internet so i had investigation and found C:Users(your name)AppDataLocalTempqoruvwtwx, so i did work around background and delete it but however that had locked my internet still it bloody frustrating
2010 11 01
0
0
<Guest>
do i get spyware doctor?
2010 11 02
0
0
<Guest>
i need help ill still have this shit pleas help
2010 11 03
0
0
<Guest>
HELP! I've tried all of this, numerous times. And more! Rkill doesn't stop it. Malwarebytes isn't touching it. Neither is SpywareDoctor. I've checked everywhere and I can find no agnz.exe files.
2010 11 05
0
0
<Guest>
For those that were able to remove it, did it affect your documents?
2010 11 05
0
0
<Guest>
I managed to destroy it just by System Restoring.

Good luck.
2010 11 05
0
0
<Guest>
THANK YOU SO MUCH. This is very helpful.
2010 11 05
0
0
<Guest>
I would enjoy pouring gasoline on the person who wrote this, and watch him die...very slowly (my sisters are retarded).
2010 11 06
0
0
<Guest>
For me too, simple system restoring to a few days earlier worked!
Thanx!!
2010 11 07
0
0
<Guest>
I too had success just restoring the system to a day earlier. I would suggest trying that first.
2010 11 07
0
0
<Guest>
I dont have a system restore, apparently. I do keep them regularly, but the only one is from midday. that restore point would be after I got this son of a bitch.
2010 11 10
0
0
<Guest>
The registries use different names now, so it's harder to spot. I had to just go in with brute force and delete everything I didn't recognize.
2010 11 13
0
0
<Guest>
Was very easy to remove this disease by going to system restore and reseting to a day earlier. To do this go to START, then ALL PROGRAMS, then ACCESSORIES, then SYSTEM TOOLS, then SYSTEM RESTORE. You can then reset to the day before you got this parasite.
2010 11 14
0
0
<Guest>
How can I get refunded for this bogus spyware? I stupidly paid $59.95. Doesn't pay to get old and still use computer. Thank you. Gloria Mitchell
2010 11 15
0
0
<Guest>
I am pretty sure your money is a long ways away in the pockets of someone who isn't willing to give it back because they got it illegaly.. sorry.
2010 11 15
0
0
Ronan
The best way to delete this is to start Windows in safe mode with command prompt and manually delete the file. It's located in UsersyournameAppdatalocalTemp in a random sequence of numbers.
2010 11 16
0
0
colton
didnt do crap for me to restore even a week earlier. so im trying the spyware doctor. hope that does the trick before i hemorrage...
2010 11 17
0
0
<Guest>
Worked well, took me a little while though.
2010 11 19
0
0
<Guest>
I got this & followed the restore system commands as in the below comment. Worked a treat & was sorted in 15 mins!!
2010 11 23
0
0
<Guest>
Restore system worked for me as well. Thank you so much!
2010 11 25
0
0
<Guest>
restroing worked for me
2010 11 27
0
0
<Guest>
thank you. so much. i seriously can't thank you enough.
2010 11 28
0
0
<Guest>
safe mode + restoring was ace advice! cheers!
2010 11 29
0
0
<Guest>
for those that got sucked into paying for their scam removal tool, you paid with your credit card, right? Do a chargeback.
2010 11 29
0
0
<Guest>
The automatic remover -
Will it just remove it, without me doing anything?
All i do is download it?
2010 11 30
0
0
<Guest>
What worked for me was to do a HijackThis. Then I deleted the two "04" entries that had .....tsbl.exe at the ends.
Then I did the LAN setting thing noted above.
2010 12 03
0
0
<Guest>
thank you so much , it worked >:D
2010 12 04
0
0
<Guest>
I cannot uncheck the "use a proxy server for your LAN' box because it doesn't "light up" is there another option. Any idea on options? thanks
2010 12 04
0
0
Danielle
Just got hit with it tonight on craigslist and it WORKED THANK YOU. Forwarded this website to all my facebook friends
2010 12 05
0
0
danny
Can I restore in safe mode, because if I am not in safe mode I am not able to go into my system tools because that damn pop up keeps telling me that my action can be executed? This blows!!!!!
2010 12 06
0
0
danny
Sorry, the pop up says "action CANNOT be executed"
2010 12 06
0
0
<Guest>
Will this work without uninstalling my McAfee, for the reason that I don't have a hard copy of McAfee and I'm afraid that I would lose it.
2010 12 06
0
0
Cass
Thank you so much whoever posted the info on how to do a system restore. Best advice ever!!
2010 12 08
0
0
<Guest>NiCk
Who ever came up with that system restore plan is a genius thank you!!
2010 12 08
0
0
<Guest>
I have windows vista and the F10 key opens setup, but the screen does not have a boot in safe mode. Is there another route?
2010 12 09
0
0
<Guest>
u could set back the system by 1 day then all downloaded files from within 24 hours would be deleted
2010 12 09
0
0
<Guest>
I did a system restore (from safe mode) and it worked perfectly. Thank you so much. How do I avoid getting it again?
2010 12 10
0
0
<Guest>
THANK YOU
2010 12 11
0
0
<Guest>
Thanks SO much. I really appreciate this!
2010 12 11
0
0
<Guest>
I've read a number of posts by guests, especially the posts about getting refunded for spending hard earned money on this crap, like I did. FYI, the people receiving payment for this bogus program are in Moscow, Russia. Good luck to all of us.
2010 12 12
0
0
<Guest>
it wont let me download it.. it says my security setting wont allow it
2010 12 13
0
0
<Guest>
I'm trying to uninstall manually and was wondering if anyone knew the process name for antivirus action. Any help wpuld be greatly appreciated!!!
2010 12 14
0
0
<Guest>
WTF! im not buying your shit! i already have Norton, but its expired, and i need internet. And im not going though the pain to do a chargeback, I would highly not recomened you to do this!!!!!!!
2010 12 15
0
0
<Guest>
This really worked, thank you. I used the malwarebytes program instead because I am familular with it and it worked great.
2010 12 17
0
0
<Guest>
hello my namees genc
2011 01 07
0
0
<Guest>
THANK YOU SO MUCH!!!!
2011 02 02
0
0
<Guest>
Thanks worked great...but my system settings or something is out of wack, gmail particularly. Any suggestions.
2011 02 10
0
0
Fred
hi i am trying to test my secutriy program do you know where i can get this virus ?
and before you thing this i am not stupid or something i have already got rid of this virus once
2011 07 18

Post Comment:

Attention: Use this form only if you have additional information about Antivirus Action parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Latest spyware news:
Subscribe to news

Similar parasites:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove Antivirus Action using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other
Latest Spyware Threats: Smart Data Recovery | Smart Fortress 2012 | Antivirus Protection 2012 | Internet Security | Internet Security 2012 | System Check | Smart HDD | Security Shield
Agreement of Use | Privacy policy | Webmasters | Contact us | RSS Feeds | Follow us | Like us
© 2001-2011 2-spyware.com All Rights Reserved. Reproduction in part or whole without written permission is prohibited. Powered by: eSolutions.