Title: Antivirus Action
Also known as: AntivirusAction

Remove Antivirus Action
Removal instructions

 
Severity scale:Antivirus Action severity is 89  (89 / 100)
 
Antivirus Action is a high-risk rogue spyware which appears to be created after its "famous" forerunner Security Suite which is known to have infected thousands of PCs. Antivirus Action is presented as a critical malware not only for typical malicious capabilities, like its secret infiltration, annoying system scanners or fake alerts. This scamware is also capable enough to disable users from the Internet, block all security software detected and let more other viruses inside. Antivirus Action will ask your specialized capabilities when you try to remove it because it is not removable through standard uninstall option.

Being distributed through fake video codecs or misleading online scanners, AntivirusAction additionally starts its misinformation stage where infected system is completely bombarded by virus detection alerts. These notifications continuously interrupt when people browse the web, and every time they appear they declare about numerous viruses detected, for example:


Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.



Security Warning
Application cannot be executed. The file notepad.exe is infected. Do you want to activate your antivirus software now.


Antivirus Action strategy is clear and obvious: being a commercial project it asks paying the money for its so-called services and offers you to update to Antivirus Action Lite, Antivirus Action Standart or Antivirus Action Ultimate. However, this scam has no spyware detection or removal engine, so won’t be able to remove any computer virus. In addition to the above mentioned facts, this virus has a great impact on the computer’s performance, so you should eliminate it as soon as it gets on your computer. It’s highly recommended to use a reliable anti-spyware and remove Antivirus Action with all its additional files.

NOTE:

When trying to eliminate this scam, you may find yourself disabled from the Internet. Here are some special notes to bring it back and remove Antivirus Action:

1. Restart your computer. As your computer restarts but before Windows launches, tap "F8" key constantly. Use the arrow keys to highlight the "Safe Mode with Networking" option as shown in the image below, and then press ENTER.




2. Open Internet Explorer. Click on the Tools menu and then select Internet Options.



3. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.



4. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.



5. Download an automatic removal tool from this page and run a full system scan. Or download it form alternative location.




Related files: Antivirus Action, Antivirus Action.lnk

Antivirus Action properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Antivirus Action removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Antivirus Action you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall Antivirus Action. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Antivirus Action and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Antivirus Action using SpyHunter, submit question to our support team and provide as much details as possible.
dot
STOPzilla
download
manual required
Tested and Confirmed! STOPzilla removes Antivirus Action (2010-10-11 06:23:09)
dot
Malwarebytes Anti Malware
download
manual required
Tested and Confirmed! Malwarebytes Anti Malware removes Antivirus Action (2010-10-11 06:23:09)
dot
XoftSpySE Anti Spyware
download
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing Antivirus Action (2011-07-18 20:44:42)
dot
Defender Pro Ultimate
download
manual required
We are testing Defender Pro Ultimate's efficiency at removing Antivirus Action (2011-07-18 20:44:42)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove Antivirus Action
Antivirus Action snapshot:
Antivirus Action snapshot

Antivirus Action manual removal:

Kill processes:
%UserProfile%Local SettingsApplication Data[random characters][random characters]agnz.exe
Delete registry values:
HKEY_CURRENT_USERSoftwareAntivirus Action
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun ??Antivirus Action??
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallAntivirus Action
HKEY_CURRENT_USERSoftware[random characters]
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerPhishingFilter "Enabled" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = ""
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random characters] gnz.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "[random characters]agnz.exe"

Delete files:
%Documents and Settings%All UsersStart MenuProgramsAntivirus Action
%Documents and Settings%All UsersDesktopAntivirus Action.lnk
%Documents and Settings%All UsersApplication DataAntivirus Action
%UserProfile%Local SettingsApplication Data[random characters][random characters]agnz.exe



Geolocation of Antivirus Action:

This map reveals the prevalence of Antivirus Action. Countries and regions that have been affected the most are: India, United States, Canada and United Kingdom.

QR code for Antivirus Action removal instructions:

Antivirus Action qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Antivirus Action are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Antivirus Action right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2010-10-11 06:23:09
Information updated: 2011-07-18 18:07:27

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

0
0
<Guest>
great. hope it works for me!
0
0
<Guest>
Thank you so much.It worked beautifully.
0
0
<Guest>
what if your computer wont launch in safe mode?
0
0
<Guest>
thank You :) The bastard seem to be gone !
0
0
<Guest>
aw man. I wish i had seen this 3 hours ago. I had this stupid virus and i just did a complete system restore.. probably losing my english essay. I'll definitely bookmark this page in case i get it again. Thanks!!!
0
0
<Guest>
thank god it's a virus.. I tought I fck up my computer i don'T know how..!
GOD thank yoU!
0
0
<Guest>
god bless man i thoght id never get rid of it
0
0
<Guest>
A MILLION THANKS!
0
0
<Guest>
I am SO glad that thing is gone! It was like having a bulbous pulsating tumor at the end of my dick that wouldn't let me take a piss. Thankyou SO MUCH!
0
0
<Guest>
if safemode won't work, when your computer starts quickly go into task mananger (ctrl alt delete) and look for a task that's running which shouldn't be. For me it was elciqnjdlta.

Once you've done that you can just take these steps as said above
0
0
<Guest>
I did everything stated above, purchase the PC Tools Spyware Doctor, and ran the Spyware Doctor program, and Antivirus Action is still on my computer. HELP!
0
0
<Guest>
Did everything and I STILL HAVE IT! HELP!!!!!!!!!
0
0
kill the bastard
im too had this shit antivirus action, and had locked my internet so i had investigation and found C:Users(your name)AppDataLocalTempqoruvwtwx, so i did work around background and delete it but however that had locked my internet still it bloody frustrating
0
0
<Guest>
do i get spyware doctor?
0
0
<Guest>
i need help ill still have this shit pleas help
0
0
<Guest>
HELP! I've tried all of this, numerous times. And more! Rkill doesn't stop it. Malwarebytes isn't touching it. Neither is SpywareDoctor. I've checked everywhere and I can find no agnz.exe files.
0
0
<Guest>
For those that were able to remove it, did it affect your documents?
0
0
<Guest>
I managed to destroy it just by System Restoring.

Good luck.
0
0
<Guest>
THANK YOU SO MUCH. This is very helpful.
0
0
<Guest>
I would enjoy pouring gasoline on the person who wrote this, and watch him die...very slowly (my sisters are retarded).
0
0
<Guest>
For me too, simple system restoring to a few days earlier worked!
Thanx!!
0
0
<Guest>
I too had success just restoring the system to a day earlier. I would suggest trying that first.
0
0
<Guest>
I dont have a system restore, apparently. I do keep them regularly, but the only one is from midday. that restore point would be after I got this son of a bitch.
0
0
<Guest>
The registries use different names now, so it's harder to spot. I had to just go in with brute force and delete everything I didn't recognize.
0
0
<Guest>
Was very easy to remove this disease by going to system restore and reseting to a day earlier. To do this go to START, then ALL PROGRAMS, then ACCESSORIES, then SYSTEM TOOLS, then SYSTEM RESTORE. You can then reset to the day before you got this parasite.
0
0
<Guest>
How can I get refunded for this bogus spyware? I stupidly paid $59.95. Doesn't pay to get old and still use computer. Thank you. Gloria Mitchell
0
0
<Guest>
I am pretty sure your money is a long ways away in the pockets of someone who isn't willing to give it back because they got it illegaly.. sorry.
0
0
Ronan
The best way to delete this is to start Windows in safe mode with command prompt and manually delete the file. It's located in UsersyournameAppdatalocalTemp in a random sequence of numbers.
0
0
colton
didnt do crap for me to restore even a week earlier. so im trying the spyware doctor. hope that does the trick before i hemorrage...
0
0
<Guest>
Worked well, took me a little while though.
0
0
<Guest>
I got this & followed the restore system commands as in the below comment. Worked a treat & was sorted in 15 mins!!
0
0
<Guest>
Restore system worked for me as well. Thank you so much!
0
0
<Guest>
restroing worked for me
0
0
<Guest>
thank you. so much. i seriously can't thank you enough.
0
0
<Guest>
safe mode + restoring was ace advice! cheers!
0
0
<Guest>
for those that got sucked into paying for their scam removal tool, you paid with your credit card, right? Do a chargeback.
0
0
<Guest>
The automatic remover -
Will it just remove it, without me doing anything?
All i do is download it?
0
0
<Guest>
What worked for me was to do a HijackThis. Then I deleted the two "04" entries that had .....tsbl.exe at the ends.
Then I did the LAN setting thing noted above.
0
0
<Guest>
thank you so much , it worked >:D
0
0
<Guest>
I cannot uncheck the "use a proxy server for your LAN' box because it doesn't "light up" is there another option. Any idea on options? thanks
0
0
Danielle
Just got hit with it tonight on craigslist and it WORKED THANK YOU. Forwarded this website to all my facebook friends
0
0
danny
Can I restore in safe mode, because if I am not in safe mode I am not able to go into my system tools because that damn pop up keeps telling me that my action can be executed? This blows!!!!!
0
0
danny
Sorry, the pop up says "action CANNOT be executed"
0
0
<Guest>
Will this work without uninstalling my McAfee, for the reason that I don't have a hard copy of McAfee and I'm afraid that I would lose it.
0
0
Cass
Thank you so much whoever posted the info on how to do a system restore. Best advice ever!!
0
0
<Guest>NiCk
Who ever came up with that system restore plan is a genius thank you!!
0
0
<Guest>
I have windows vista and the F10 key opens setup, but the screen does not have a boot in safe mode. Is there another route?
0
0
<Guest>
u could set back the system by 1 day then all downloaded files from within 24 hours would be deleted
0
0
<Guest>
I did a system restore (from safe mode) and it worked perfectly. Thank you so much. How do I avoid getting it again?
0
0
<Guest>
THANK YOU
0
0
<Guest>
Thanks SO much. I really appreciate this!
0
0
<Guest>
I've read a number of posts by guests, especially the posts about getting refunded for spending hard earned money on this crap, like I did. FYI, the people receiving payment for this bogus program are in Moscow, Russia. Good luck to all of us.
0
0
<Guest>
it wont let me download it.. it says my security setting wont allow it
0
0
<Guest>
I'm trying to uninstall manually and was wondering if anyone knew the process name for antivirus action. Any help wpuld be greatly appreciated!!!
0
0
<Guest>
WTF! im not buying your shit! i already have Norton, but its expired, and i need internet. And im not going though the pain to do a chargeback, I would highly not recomened you to do this!!!!!!!
0
0
<Guest>
This really worked, thank you. I used the malwarebytes program instead because I am familular with it and it worked great.
0
0
<Guest>
hello my namees genc
0
0
<Guest>
THANK YOU SO MUCH!!!!
0
0
<Guest>
Thanks worked great...but my system settings or something is out of wack, gmail particularly. Any suggestions.
0
0
Fred
hi i am trying to test my secutriy program do you know where i can get this virus ?
and before you thing this i am not stupid or something i have already got rid of this virus once

Post Comment:

Attention: Use this form only if you have additional information about Antivirus Action parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48602 Subscribers
Ask us
I failed to remove Antivirus Action using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other