Jan 6, 2009

Remove Antivirus 2010 - Antivirus 2010 Removal Instructions

Antivirus 2010 is a rogue anti-spyware program, clone of Antivirus 2008 and Antivirus 2009. Like previous version Antivirus 2010 is advertised through the use of fake anti-malware scanners. This advertisements should scan your computer and list variety of threats detected on your pc, and only way to remove it all is to download and install Antivirus 2010. Also Antivirus 2010 can use Trojan horses to generate fake security alerts in your Windows taskbar stating that your computer is infected with variety of spyware and malware. If you click on that alerts you will be brought to Antivirus 2010 download page.
Once Antivirus 2010 is installed it will perform automatical scan and list variety of infection that cannot be removed unless you purchase licensed version.
Important to notice that Antivirus 2010 can easily crash your system and load fake Blue Screen of Death.
We strongly recommend you to remove Antivirus 2010 manually or using automatical removal tool.

Type: Rogue Anti-Spyware
Malware Author: Innovagest2000
Threat Level: Critical
Screenshot:



How to remove Antivirus 2010 manually:
It's possible to remove Antivirus 2010 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* \Program Files\AV2010\AV2010.exe
* \Program Files\AV2010\svchost.exe
* \WINDOWS\system32\IEDefender.dll
* \WINDOWS\system32\wingamma.exe
* \Documents and Settings\All Users\Desktop\AV2010.lnk
* \Documents and Settings\All Users\Start Menu\Programs\AV2010\AV2010.lnk
* \Documents and Settings\All Users\Start Menu\Programs\AV2010\Uninstall.lnk


Remove registry entries:

* HKEY_CURRENT_USER\Software\AV2010
* HKEY_CLASSES_ROOT\AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}
* HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
* HKEY_CLASSES_ROOT\CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
* HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
* HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
* HKEY_CLASSES_ROOT\Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}
* HKEY_CLASSES_ROOT\TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Gamma Display”

Please be careful because manual removal of Antivirus 2010 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/