Title: Anti-Virus Number-1

Type: Rogue Antispyware

Remove Anti-Virus Number-1. Removal instructions

Also known as: Anti-Virus Number 1, Anti-Virus Number1, AntiVirus Number1

Severity scale:

(68 / 100)

Anti-Virus Number-1 is another rogue anti-spyware application. Probably it's just a rename of Anti-Virus-1 or Antivirus 2010. Anti-Virus Number-1 uses wilful fake advertisements and pretends to be a legitimate spyware remover. Typically, this parasite is installed without user's knowledge using trojan viruses that display fake alert notifications. Once user clicks on fake alert window, he downloads and installs Anti-Virus Number 1 into his computer automatically.

Once installed, Anti-Virus Number1 is configured to run automatically when the operating system starts up. Then Anti-Virus Number-1 performs fake system scan and displays various counterfeit infections and security problems. For example:

"Internal conflict alert.
Anti-Virus Number-1 detected internal software conflict. Some applicztion tries to get access to system kernel (such behavior is typical to Spyware/Malware). It may cause crash of your computer."

"Privacy Violation alert!
Anti-Virus Number-1 detected a Privacy Violation. A program is secretly sending your private data to an untrusted internet host. click here to block this activity by removing the threat (Recommended)."

Of course all those infections and security issues are feigned in order to scare the user. It is already obvious that such disinformation should be ignored. Don't purchase Anti-Virus Number-1 in any case. Instead, remove this parasite immediately after first appearance.

Related files: AV1.cab, av1.exe, AV1i.exe, AV1Two.exe, QWProtect.dll, svchost.exe, Anti-Virus Number-1.lnk, uninstall.lnk, BasCw1RaU1oLasEc1S.exe

Anti-Virus Number-1 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Anti-Virus Number-1 snapshot:

Automatic Anti-Virus Number-1 removal:

remover for Anti-Virus Number-1

SpyHunter is recommended remover to uninstall Anti-Virus Number-1. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Anti-Virus Number-1 and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Anti-Virus Number-1 using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes Anti-Virus Number-1 (2009-03-16 05:39:22)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Anti-Virus Number-1 (2009-03-16 05:39:22)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Anti-Virus Number-1 (2009-03-31 02:40:51)

XoftSpySE Anti Spyware

download | review

Anti-Virus Number-1 manual removal:

FORUM:
Discuss Anti-Virus Number-1 in
spyware removal forum

Kill processes:
svchost.exe n1two.exe n1.exe n1i.exe svchost.exe n1two.exe n1i.exe n1.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\AV1
HKEY_CLASSES_ROOT\AppID\{0D1DBFEE-0C43-4223-8B3E-A56FB3C5C87D}
HKEY_CLASSES_ROOT\AppID\QWProtect.DLL
HKEY_CLASSES_ROOT\CLSID\{8D187DFF-423F-41d3-A331-A60DE5886675}
HKEY_CLASSES_ROOT\Interface\{0D1DBFEE-0C43-4223-8B3E-A56FB3C5C87D}
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO.1
HKEY_CLASSES_ROOT\TypeLib\{CD30B357-F8F7-4AD1-BF68-04A219D21A69}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D187DFF-423F-41d3-A331-A60DE5886675}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Drives swap"

HELP:
how to remove registry entries

Unregister DLLs:
qwprotect.dll

HELP:
how to unregister malicious DLLs

Delete files:
AV1.cab av1.exe AV1i.exe AV1Two.exe QWProtect.dll svchost.exe Anti-Virus Number-1.lnk Anti-Virus Number-1.lnk Uninstall.lnk BasCw1RaU1oLasEc1S.exe

HELP:
how to remove harmful files

Delete directories:
c:\Documents and Settings\All Users\Application Data\AV1
c:\Documents and Settings\All Users\Start Menu\Programs\Anti-Virus Number-1
%common_appdata%\av1
%common_programs%\anti-virus number-1

Information added: 2009-03-16 05:39:22
Information updated: 2009-03-31 00:03:36

Additional resources related to Anti-Virus Number-1:

Attention: If you know or you have a website or page about Anti-Virus Number-1 removal, feel free to add a link to this list: add url

more resources

<Guest>

I recieved this virus and then ran system restore and I was able to remove it using system restore.

Hope this helps

Reply »

2009 03 25

<Guest>

I got this virus and my whole computer crashed! System restore did not work! It is a vicious bug and I do not know how I was infected...possibly on facebook, so use caution!

Reply »

2009 03 31

Post Comment:

Attention: Use this form only if you have additional information about Anti-Virus Number-1 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.