February 22, 2010

How to remove AntivirusFraud (Fake Antivirus)

AntivirusFraud is a fake security application that may show false/bogus warnings about threats on the computer.
How to remove AntivirusFraud ?

1. Perform standard procedure for Virus removal.
** Standard procedure for Virus removal

2. Remove the following entries from windows registry

** How to edit windows registry ?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus


Remove these files if exist on your system

C:\Documents and Settings\All Users\Desktop\Antivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus\Antivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus\Uninstall.lnk
%ProgramFiles%\Antivirus\Antivirus.exe
%ProgramFiles%\Antivirus\wscsvc32.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus.lnk
%ProgramFiles%\Antivirus\AvBho.dll
%ProgramFiles%\Antivirus\Uninstall.exe

No comments: