Remove Anti-Virus Number-1. Description and removal instructions

 
Title: Anti-Virus Number-1
Also known as: Anti-Virus Number 1, Anti-Virus Number1, AntiVirus Number1
Type: Spyware
Severity scale:Anti-Virus Number-1 severity is 68  (68 / 100)
 
Anti-Virus Number-1 is another rogue anti-spyware application. Probably it's just a rename of Anti-Virus-1 or Antivirus 2010. Anti-Virus Number-1 uses wilful fake advertisements and pretends to be a legitimate spyware remover. Typically, this parasite is installed without user's knowledge using trojan viruses that display fake alert notifications. Once user clicks on fake alert window, he downloads and installs Anti-Virus Number 1 into his computer automatically.

Once installed, Anti-Virus Number1 is configured to run automatically when the operating system starts up. Then Anti-Virus Number-1 performs fake system scan and displays various counterfeit infections and security problems. For example:

"Internal conflict alert.
Anti-Virus Number-1 detected internal software conflict. Some applicztion tries to get access to system kernel (such behavior is typical to Spyware/Malware). It may cause crash of your computer."

"Privacy Violation alert!
Anti-Virus Number-1 detected a Privacy Violation. A program is secretly sending your private data to an untrusted internet host. click here to block this activity by removing the threat (Recommended)."

Of course all those infections and security issues are feigned in order to scare the user. It is already obvious that such disinformation should be ignored. Don't purchase Anti-Virus Number-1 in any case. Instead, remove this parasite immediately after first appearance.


Related files: AV1.cab, av1.exe, AV1i.exe, AV1Two.exe, QWProtect.dll, svchost.exe, Anti-Virus Number-1.lnk, uninstall.lnk, BasCw1RaU1oLasEc1S.exe

Anti-Virus Number-1 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Anti-Virus Number-1 snapshot:
Anti-Virus Number-1 removal

Automatic Anti-Virus Number-1 removal:

remover for Anti-Virus Number-1

Anti-Virus Number-1 manual removal:

Kill processes:
svchost.exe n1two.exe n1.exe n1i.exe svchost.exe n1two.exe n1i.exe n1.exe
Delete registry values:
HKEY_CURRENT_USER\Software\AV1
HKEY_CLASSES_ROOT\AppID\{0D1DBFEE-0C43-4223-8B3E-A56FB3C5C87D}
HKEY_CLASSES_ROOT\AppID\QWProtect.DLL
HKEY_CLASSES_ROOT\CLSID\{8D187DFF-423F-41d3-A331-A60DE5886675}
HKEY_CLASSES_ROOT\Interface\{0D1DBFEE-0C43-4223-8B3E-A56FB3C5C87D}
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO.1
HKEY_CLASSES_ROOT\TypeLib\{CD30B357-F8F7-4AD1-BF68-04A219D21A69}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D187DFF-423F-41d3-A331-A60DE5886675}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Drives swap"
Unregister DLLs:
qwprotect.dll

Delete files:
AV1.cab av1.exe AV1i.exe AV1Two.exe QWProtect.dll svchost.exe Anti-Virus Number-1.lnk Anti-Virus Number-1.lnk Uninstall.lnk BasCw1RaU1oLasEc1S.exe
Delete directories:
c:\Documents and Settings\All Users\Application Data\AV1
c:\Documents and Settings\All Users\Start Menu\Programs\Anti-Virus Number-1
%common_appdata%\av1
%common_programs%\anti-virus number-1

Other programs to remove Anti-Virus Number-1:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 16/03/09
Information updated: 31/03/09

Additional resources related to Anti-Virus Number-1:

Attention: If you know or you have a website or page about Anti-Virus Number-1 removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Anti-Virus Number-1 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2009-03-31 00:03:36
I got this virus and my whole computer crashed! System restore did not work! It is a vicious bug and I do not know how I was infected...possibly on facebook, so use caution!

2. by . 2009-03-25 17:03:25
I recieved this virus and then ran system restore and I was able to remove it using system restore.

Hope this helps


Latest spyware news:
Similar parasites: