Antivirus Scan: what it is and how to remove it
Antivirus Scan is malware that users usually download unintentionally or when they look for a security application. Unfortunately, this program is simply a rogue anti-spyware which tries to scam people into paying money for its full version.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If Antivirus Scan keeps coming back after uninstalling, a scan can find what reinstalls it.
Do it yourself · free Remove Antivirus Scan yourself 5 steps, about 15 minutes, no software needed.
Start the steps
Antivirus Scan: summary
| Name | Antivirus Scan |
|---|---|
| Type | Rogue anti-spyware, scareware, malware |
| Infection | Users might download this app when looking for anti-malware software or can be tricked into doing so during the installation of freeware or fake updates |
| Symptoms | Persistent fake scans performed via Antivirus Scan which return hundreds of entries claiming virus infections; system tray shows pop-ups from the fake tool; browsers display fake alerts about hacks, scams, malware, and other online threats |
| Dangers | Antivirus Scan might corrupt several Windows components and alter the registry; if the software is paid for, the sensitive credit card information might be stolen and result in money loss or/and identity theft |
| Termination | In case getting rid of this malware is impossible normally (via Control Panel), you should access Safe Mode as explained below and scan your machine with reputable anti-malware |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Evidence | 5 write-ups by security sites; details still limited |
| Program | Antivirus Scan |
| First seen | 10 December 2019 |
| Facts checked | 6 October 2026 |
Is Antivirus Scan a real security program?
From our report of Dec 2019 · not reviewed since
Antivirus Scan is a fake anti-malware that might damage your Windows OS files
Antivirus Scan is malware that users usually download unintentionally or when they look for a security application.
Unfortunately, this program is simply a rogue anti-spyware which tries to scam people into paying money for its full version. If users decline to do so, Antivirus Scan will spam them with continual intrusive notifications and warnings about alleged infections found on the machine.
If you got scammed by Antivirus Scan already, you should immediately contact your bank to dispute the charges. Besides, your personal information you entered while paying might be in danger as well, so you should immediately change all your passwords. As evident, you should immediately remove Antivirus Scan from your machine and rely on appropriate security tools to protect you from online threats.
Antivirus Scan actually works like malware more than anything - it not only shows fake notifications urging users to buy its full license but also heavily modifies Windows registry, and also hijacks Internet Explorer by changing its proxy settings - users are then led to scam websites where even more fake warnings are shown. As a result, many might believe that their computers are severely infected or damaged.
Besides, the fake Antivirus Scan messages might often claim that personal information is being stolen, or that the supposed malware will corrupt their computers. In reality, the only malicious software that is present is the rogue anti-spyware itself, and it should be eliminated as soon as possible.
Unfortunately, Antivirus Scan removal might not be as straightforward as that of a normal Windows program. The main reason for that is the modification of the registry. For example, the rogue tool is set to be started with every Windows boot by adding its own entry under this registry location:
Therefore, in some cases, getting rid of the Antivirus Scan malware might be difficult - there are several methods on how to bypass it, however. For example, entering Safe Mode would temporarily suspend the operation of malicious software and allow its termination.
For the reference, Antivirus Scan is not a standalone scareware application in the wild and belongs to the same family of viruses like Antivirus Action or Security Suite. Fake programs are often re-branded and distributed as new products, although their functionality is identical.
Thus, you should watch out for this type of scam tool - never pay for the full version, as not only you will get scammed but might also expose your credit card details to cybercriminals.
From our report of Dec 2019 · not reviewed since
Don't get deceived by fake anti-virus programs - the developers only seek your money in return for nothing
Software for Windows is a great addition that can customize each user's experience and enhance the functionality of the system.
Without a doubt, security software is one of the main applications that should be installed and used, as there ate thousands of threats lurking online. Unfortunately, due to various setting modifications and high customization level, there are also many holes that are filled with malicious software.
While some malware is installed intentionally (for example, pirated software installers and cracks/keygens are especially dangerous and often infused with malware), most of the time, crooks use some type of social engineering to infect hosts.
One of the most popular tactics involves adware bundles where optional components are deliberately hidden from sight, as the installer uses pre-ticked boxes, fine print text, misleading button placements, and other tricks to prevent users from noticing bundled programs. To avoid installation of unwanted software, users should always pay close attention to the installation process to avoid deception and always opt for Advanced/Custom settings instead of Recommended/Quick ones.
Other malware infection means include:
For comprehensive protection, security experts advise installing powerful security software with real-time protection feature that could protect you from the incoming online threats.
- Backdoors;
- Exploits;
- Fake updates;
- Web injects;
- Spam emails, etc.
From our report of Dec 2019 · not reviewed since
More from our earlier report on Antivirus Scan
- Rogue anti-spyware might cause tremendous damage to Windows OS.
How to remove Antivirus Scan
Nothing it reports is real.
These steps remove it and undo a payment if you made one.
Step 1: Do not pay, and undo a payment if you made one
Nothing that Antivirus Scan says it found needs fixing by Antivirus Scan. Close its windows and do not enter card details.
If you bought it, contact your bank or card issuer about a dispute and cancel any renewal, keeping the receipt e-mail as evidence. Uninstalling it from Windows 11 or Windows 10 removes the program but leaves the subscription running.
Full procedure with screenshots: What to do after paying a scammer
Step 2: Uninstall Antivirus Scan
Antivirus Scan is removed like any other program, from the list of installed apps. In Windows 11 that is Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and in both you can also use Control Panel > Programs and Features.
Select Antivirus Scan, click Uninstall and follow the uninstaller to the end. Then look at the entries just above and below it when the list is sorted by date: bundled programs install at the same minute.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Remove it from startup
Press Ctrl + Shift + Esc to open Task Manager and select Startup apps (Windows 11) or the Startup tab (Windows 10). Disable entries you do not recognise, especially ones with no publisher or with a name that copies a Windows component.
Right-click an entry and choose Open file location to see where it runs from: programs in
%AppData%or%Temp%deserve a closer look. Some entries are not listed there but in the registry Run keys, which the procedure below shows how to check.Full procedure with screenshots: Stop apps from opening at startup On uGetFix
Step 4: Delete the folders left behind
Uninstalling often leaves the program's folders, and some threats reinstall themselves from them.
Press Windows + R, type
%LocalAppData%and press Enter, then do the same for%AppData%and %ProgramData%, and look for folders named after Antivirus Scan, its publisher or created on the day the problem started.Delete those folders, and check
C:\Program FilesandC:\Program Files (x86)too.If Windows says a file is in use, end it in Task Manager or delete the folder after a restart in Safe Mode. The folders are the same in Windows 11 and Windows 10.
Full procedure with screenshots: Remove what malware leaves behind in Windows
Step 5: Scan the PC, then run the offline scan
A scan finds the parts of Antivirus Scan that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Manual removal using Safe Mode
Important! →
Manual removal guide might be too complicated for regular computer users. It requires advanced IT knowledge to be performed correctly (if vital system files are removed or damaged, it might result in full Windows compromise), and it also might take hours to complete. Therefore, we highly advise using the automatic method provided above instead.
Step 1. Access Safe Mode with Networking
Manual malware removal should be best performed in the Safe Mode environment.
Windows 7 / Vista / XP
- Click Start > Shutdown > Restart > OK.
- When your computer becomes active, start pressing F8 button (if that does not work, try F2, F12, Del, etc. - it all depends on your motherboard model) multiple times until you see the Advanced Boot Options window.
- Select Safe Mode with Networking from the list.
Windows 10 / Windows 8
- Right-click on Start button and select Settings.
- Scroll down to pick Update & Security.
- On the left side of the window, pick Recovery.
- Now scroll down to find Advanced Startup section.
- Click Restart now.
- Select Troubleshoot.
- Go to Advanced options.
- Select Startup Settings.
- Press Restart.
- Now press 5 or click 5) Enable Safe Mode with Networking.
Step 2. Shut down suspicious processes
Windows Task Manager is a useful tool that shows all the processes running in the background. If malware is running a process, you need to shut it down:
- Press Ctrl + Shift + Esc on your keyboard to open Windows Task Manager.
- Click on More details.
- Scroll down to Background processes section, and look for anything suspicious.
- Right-click and select Open file location.
- Go back to the process, right-click and pick End Task.
- Delete the contents of the malicious folder.
Step 3. Check program Startup
- Press Ctrl + Shift + Esc on your keyboard to open Windows Task Manager.
- Go to Startup tab.
- Right-click on the suspicious program and pick Disable.
Step 4. Delete virus files
Malware-related files can be found in various places within your computer. Here are instructions that could help you find them:
- Type in Disk Cleanup in Windows search and press Enter.
- Select the drive you want to clean (C: is your main drive by default and is likely to be the one that has malicious files in).
- Scroll through the Files to delete list and select the following:
Temporary Internet Files
Downloads
Recycle Bin
Temporary files - Pick Clean up system files.
- You can also look for other malicious files hidden in the following folders (type these entries in Windows Search and press Enter):
%AppData%
%LocalAppData%
%ProgramData%
%WinDir%
After you are finished, reboot the PC in normal mode.
Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
From our report of Dec 2019 · not reviewed since
Get rid of Antivirus Scan malware and install reputable security tools
When a regular application is installed on a Windows computer, it can be eliminated via the Control panel at any time, just with a few button clicks.
However, Antivirus Scan removal might not be as easy due to its malicious nature - as we previously stated, the application acts more like malware rather than a potentially unwanted program. Because of that, most reputable anti-malware tools (such as or ) would flag the tool as malicious.
Nevertheless, the best way to remove Antivirus Scan virus is to access Safe Mode and then scanning the computer with security software. This process should only take a few minutes, and all the malicious components of the app should be deleted. Additionally, because the malware modified Internet Explorer settings and adds a proxy, it is best to reset the web browser to prevent pop-ups from showing up in the future.
[GI=method-1]If Antivirus Scan is difficult to remove, access Safe Mode with Networking and perform a full system scan with anti-malware from there:
Questions about Antivirus Scan
Can I safely uninstall Antivirus Scan?
If you did not install Antivirus Scan yourself and it is not part of your hardware or a program you rely on, yes. Uninstalling an unwanted program does not harm Windows. Before you do, search the exact name and publisher to be sure it is not a driver tool, a printer utility or a game launcher with an odd name.
Then remove it from Settings, Apps, Installed apps. Ignore any offers or warnings in its uninstaller about losing protection or performance. Afterwards check Startup apps and your browsers for leftovers, and restart once to confirm that it does not reinstall itself.
How do I stop programs like Antivirus Scan from being installed again?
Most unwanted programs arrive through installers, so the fix is in how you install software. Download programs from their official sites or the Microsoft Store, not from download portals or ads above search results. During setup, choose Custom or Advanced installation and untick every extra offer, including browsers, toolbars and optimizers.
Decline update prompts that appear inside other programs unless you know them. In Windows Security, turn on reputation-based protection and potentially unwanted app blocking. These steps would most likely have stopped Antivirus Scan before it reached the app list.
Why does Antivirus Scan look so official?
Because copying the design costs nothing and makes people trust it. The program behind antivirus Scan in the list of installed apps borrows Windows colours, icons and wording, sometimes even the name of a well-known security brand. None of that gives it access to real security information.
A real alert can be checked in seconds: open Windows Security from the Start menu and look at Protection history. If nothing is listed there, the official-looking window is fake, and the program that draws it is what needs to be removed.
Someone called offering a refund for Antivirus Scan. Is it genuine?
Almost certainly not. Refund calls are a well-known second stage of scareware and tech support scams. The caller says you are owed money, asks you to install a remote access program to "process" it, then opens your online banking, makes it look as if too much was refunded and asks you to send the difference back.
Hang up. Real refunds go back to the card or PayPal account you paid with, through your bank or the payment provider, and never need remote access or a gift card.
Is my card safe after buying Antivirus Scan?
Treat it as exposed. The order page belongs to the seller of Antivirus Scan, and you cannot know how the number is stored or shared. Ask your bank for a replacement card, which is usually free, and dispute the original charge as a misrepresented product.
Until the new card arrives, check your account daily for small or foreign transactions. If the bank offers alerts for every card payment, turn them on. Keep the receipt and screenshots, because they support the dispute.
Antivirus Scan will not uninstall. What can I do?
Close it in Task Manager first, then uninstall it from Settings > Apps > Installed apps (in Windows 10, Apps & features). If it blocks this or restarts itself, start Windows in Safe Mode, where third-party programs do not start automatically, and uninstall from there.
Afterwards run a Microsoft Defender offline scan and delete any leftover folder named after Antivirus Scan in C:\Program Files or %AppData%. If nothing works, Windows can be reset while keeping your personal files, which removes the program together with any settings it changed.
Did Antivirus Scan steal my information?
Not by itself, as far as reports show. Programs that display antivirus Scan in the list of installed apps are built to scare people into paying or calling; they rarely take data on their own.
The risk comes from what you did in response: typing card details into the program, or letting a caller connect to your PC. If you did neither, uninstalling the program is enough. If you did either, treat that information as exposed:
- block the card
- change passwords from another device
- remove any remote-access tool that was installed
Is Windows Security enough to protect me from programs like Antivirus Scan?
For most home users, yes, especially with Potentially unwanted app blocking turned on in Windows Security > App & browser control > Reputation-based protection settings. That setting blocks many scareware installers before they run.
No security tool stops every scam, though, because programs like Antivirus Scan are usually installed by the user after a frightening message. The habit that helps most is simple: ignore any website or pop-up that claims to have scanned your PC, and never call a number shown in a warning.
Is Antivirus Scan an antivirus?
No. It looks like one, with a shield, a scan and a list of threats, but Antivirus Scan is a rogue antivirus: its scans are designed to find something every time, and every fix leads to a payment page.
A real antivirus detects the same threats consistently, removes them without asking for money first and does not block other security tools. Windows 11 and Windows 10 already include Microsoft Defender in Windows Security, which is enough for most home users. Remove Antivirus Scan and keep Defender on.
Will Fortect remove Antivirus Scan?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Antivirus Scan, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- F-Secure: Rogue antispyware/antivirus software (read October 6, 2026)
- Wikipedia: Scareware (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)
- Microsoft Learn: How Microsoft names malware (read October 6, 2026)