Remove Nortel Antivirus. Description and removal instructions

Title: Nortel Antivirus	Also known as: NortelAntivirus
Type: Spyware	Severity scale: (62 / 100)

Nortel Antivirus is a misleading security application that displays false scan results, fake security alerts and reports non-existing system security threats on your computer. Do not confuse this rogue program with Norton Antivirus which is well know and reliable anti-virus software. Once installed, NortelAntivirus will list a variety of infections and ask you to purchase the program in order to remove computer threats which do not even exist. Do not purchase it! Instead, uninstall Nortel Antivirus from your computer as soon as possible.

Usually, Nortel Antivirus is promoted through the use of Trojans, specifically Trojan.FakeAValert. This Trojan downloads the rogue security program secretly without your knowledge and permission. The misleading application can be also advertised through the use of fake online anti-malware scanners and browser hijackers. The homepage of Nortel Antivirus is nortel-antivirus.com, however, do not download and install this bogus software.

While running, NortelAntivirus will be automatically configured to scan your computer each time you log on into Windows. The bogus program will state that your computer is seriously infected and that you should purchase a full version of the program to remove those infections. Of course, we strongly recommend you not to do so because the scan results are false. Furthermore, Nortel Antivirus will constantly display fake security alerts and notifications about various privacy issues and security problems. It will claim that your antivirus software is disabled too. Obviously that's not true.

If you find that your computer is infected with this parasite, please use the removal guide below to remove Nortel Antivirus from the system manually for free. Also be sure to scan your computer with reliable anti-spyware application.

FORUM:
Discuss Nortel Antivirus in
spyware removal forum

Related files: mrgdll.exe, wox.exe

Nortel Antivirus properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Nortel Antivirus snapshot:

Automatic Nortel Antivirus removal:

remover for Nortel Antivirus

Nortel Antivirus manual removal:

Kill processes:
wox.exe mrgdll.exe mrgdll.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[RANDOM NAME]" = "C:\ProgramData\nol\mrgdll.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[RANDOM NAME]" = "C:\ProgramData\nol\wox.exe"
HKEY_CURRENT_USER\Software\wox

HELP:
how to remove registry entries

Delete files:
wox.exe mrgdll.exe mrgdll.exe

HELP:
how to remove harmful files

Delete directories:
C:\ProgramData\nol\
%UserProfile%\Application Data\nol\

Other programs to remove Nortel Antivirus:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 01/09/09
Information updated: 07/12/09

Additional resources related to Nortel Antivirus:

Attention: If you know or you have a website or page about Nortel Antivirus removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Nortel Antivirus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Comments from visitors:

1. by . 2009-12-07 12:12:55

Just removed it from a friend running Win Vista Home Premium. The directory is now c:programdatanrs and applications are nrsx.exe and sgav.exe. Registry entries are nrsx.exe & sgav.exe. Also look for wre.bat & mnrtdll.exe in registry & directories

2. by . 2009-10-04 06:10:27

Just removed this junk .... They've changed it again.

The files are no longer wox.exe and mgrdll.exe ...... They are now nsrx.exe and mnrtdll.exe. They are now located in C:documents and settingsall usersapplication datanrs

Latest update to Malware bytes did not pick it up.

3. by Steve. 2009-10-01 14:10:22

Download malwarebytes and run in safe mode. Will remove it!!!!