Nov 28, 2008

Remove Extra Antivir - Extra Antivir Removal Instructions

Extra Antivir (ExtraAntivir) is one of latest counterfeit antispyware program from same family as well known Rapid Antivirus. Extra Antivir has two versions - 2.0 and 2.8. Extra Antivir may be installed by Trojan ( usually Vundo). The term Trojan refers to the fact that Extra Antivir is installed without users approval or knowlage. Once Extra Antivir is in your computer it will configure itself to run automatically each time you turn on your computer. Once started, the program will perform security scan and then list variety of spyware and malware. Important to mention that Extra Antivir mark legitime files (cmd.exe, regmon.exe, mbam.exe) as dangerous threats. Also Extra Antivir will generate a lot of pup-ups,security alerts. All these are made to scare computer users, and push them into buying licensed version.
Extra Antivir is a scam and shouldn’t be trusted, downloaded and installed.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: High


Screenshot:



How to remove Extra Antivir manually:
It's possible to remove Extra Antivir manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* %UserProfile%\Application Data\Extra Antivir
* %UserProfile%\Application Data\Extra Antivir\Extra Antivir.ini
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\base.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\base2.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\Desc.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\spline.dat


Remove registry entries:

HKEY_CURRENT_USER\Software\Extra Antivir


Please be careful because manual removal of Extra Antivir may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/