Severity scale:  

Nortel Antivirus. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as NortelAntivirus | Type: Rogue Antispyware

Nortel Antivirus is a misleading security application that displays false scan results, fake security alerts and reports non-existing system security threats on your computer. Do not confuse this rogue program with Norton Antivirus which is well know and reliable anti-virus software. Once installed, NortelAntivirus will list a variety of infections and ask you to purchase the program in order to remove computer threats which do not even exist. Do not purchase it! Instead, uninstall Nortel Antivirus from your computer as soon as possible.

Usually, Nortel Antivirus is promoted through the use of Trojans, specifically Trojan.FakeAValert. This Trojan downloads the rogue security program secretly without your knowledge and permission. The misleading application can be also advertised through the use of fake online anti-malware scanners and browser hijackers. The homepage of Nortel Antivirus is, however, do not download and install this bogus software.

While running, NortelAntivirus will be automatically configured to scan your computer each time you log on into Windows. The bogus program will state that your computer is seriously infected and that you should purchase a full version of the program to remove those infections. Of course, we strongly recommend you not to do so because the scan results are false. Furthermore, Nortel Antivirus will constantly display fake security alerts and notifications about various privacy issues and security problems. It will claim that your antivirus software is disabled too. Obviously that’s not true.

If you find that your computer is infected with this parasite, please use the removal guide below to remove Nortel Antivirus from the system manually for free. Also be sure to scan your computer with reliable anti-spyware application.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Nortel Antivirus you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Nortel Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Nortel Antivirus snapshot
Nortel Antivirus

Nortel Antivirus manual removal:

Kill processes:



Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun"[RANDOM NAME]" = "C:ProgramDatanolmrgdll.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun"[RANDOM NAME]" = "C:ProgramDatanolwox.exe"


Delete files:



Delete directories:

%UserProfile%Application Datanol

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

  • Steve

    Download malwarebytes and run in safe mode. Will remove it!!!!

  • Guest

    Just removed this junk …. They've changed it again.

    The files are no longer wox.exe and mgrdll.exe …… They are now nsrx.exe and mnrtdll.exe. They are now located in C:documents and settingsall usersapplication datanrs

    Latest update to Malware bytes did not pick it up.

  • Guest

    Just removed it from a friend running Win Vista Home Premium. The directory is now c:programdatanrs and applications are nrsx.exe and sgav.exe. Registry entries are nrsx.exe & sgav.exe. Also look for wre.bat & mnrtdll.exe in registry & directories