Severity scale:  
  (72/100)

AV Security Essentials. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as AVSecurityEssentials | Type: Rogue Antispyware
12

AV Security Essentials is a rogue anti-spyware program that displays fake security alerts and reports false malware infections to make you believe your computer is infected with spyware and similar stuff. The rogue program is a clone of Smart Anti-Malware Protection scareware and it is promoted mostly through the use of Trojans and fake online virus scanners. Scammers may also promote their bogus software on popular social networks and instant messengers. Once installed, AV Security Essentials will run a fake system scan and display a list of non-existent malware infections. The scan results are completely false, so you may safely ignore them. The rogue program may detect legitimate programs and files as infections as well. For example, AV Security Essentials may claim that Internet Explorer (iexplore.exe) is infected by notorious Blaster worm. This is not true. That's why you shouldn't follow on screen instructions. Instead, please use the removal instructions below to remove AV Security Essentials from your computer safely.

When running, AV Security Essentials will display numerous fake and very annoying security alerts claiming that your computer is compromised or infected and that you should activate AV Security Essentials to ensure full system protection against the latest malware threats. This fake program will blocks legit antivirus and anti-spyware programs to protect itself from being removed. It may block those programs in Safe Mode too. It will claim that your anti-virus or any other program actually is infected. If you find that your computer is infected with AV Security Essentials, please follow the removal instructions below. And of course, don't purchase it. This is nothing more but a scam. However, if you have already bought it then you should contact your credit card company and dispute the charges as soon as possible. To make the removal procedure easier, you can activate this rogue application using this fake registration code U2FD-S2LA-H4KA-UEPB. This doesn't remove AV Security Essentials, but entering the fake registration key disables rogue's self defence mechanisms.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove AV Security Essentials you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall AV Security Essentials. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

AV Security Essentials manual removal:

Kill processes:
[random].exe

AV9c5_8046.exe

scandsk211d_8046.exe

ASa76.exe

eb.exe

runddlkey.exe

Delete registry values:
HKEY_LOCAL_MACHINESoftwareClassesclsid{3F2BBC05-40DF-11D2-9455-00104BC936FF}

Default = Implements DocHostUIHandler

LocalServer32 = %AllUsersProfile%Application Data5c678cAS9c5_8046.exe

ProgID = AS9c5_8046.DocHostUIHandler

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Options

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAdwarePrj.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsagent.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAnti-Virus Professional.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntispywarXP2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPro_2010.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsantivirusxppro2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntiVirus_Pro.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsav360.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAVCare.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsbrastk.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsCl.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionscsc.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsdop.exe

Debugger = svchost.exe

Unregister DLLs:
mozcrt19.dll

Delete files:
%AllUsersProfile%Application Data5c678c

%AllUsersProfile%Application Data5c678csqlite3.dll

%AllUsersProfile%Application Data5c678cASPSys

%AllUsersProfile%Application Data5c678cBackUp

%AllUsersProfile%Application Data5c678cQuarantine Items

%AllUsersProfile%Application Data5c678c582.mof

%AllUsersProfile%Application Data5c678cAS9c5_8046.exe

%AllUsersProfile%Application Data5c678cASP.ico

%AllUsersProfile%Application Data5c678cmozcrt19.dll

%AllUsersProfile%Application DataASLNP

%AllUsersProfile%Application DataASLNPASUUDJRRJXP.cfg

%AppData%AV Security Essentials

%AppData%AV Security Essentialscookies.sqlite

%AppData%MicrosoftInternet ExplorerQuick LaunchAV Security Essentials.lnk

%UserProfile%DesktopAV Security Essentials.lnk

%Temp%scandsk211d_8046.exe

%UserProfile%Start MenuAV Security Essentials.lnk

%UserProfile%Start MenuProgramsAV Security Essentials.lnk

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions