October 31, 2009

AntiVirus 2010 Is A Virus! Removal Instructions




antivirus-2010Just so you’re all aware there is a new malware being spread out on the net.
If this begins to download you can stop the installation by performing a hard shutdown of your computer (Hit the power off button).


Antivirus Pro 2010 is a misleading security application pushed through Braviax malware (Trojan.Virantix.C Trojan virus). This program is classified as misleading application because it reports false scan results and displays fake security alerts to make you think your computer is infected.

AntivirusPro 2010 from the same family as PC Antispyware 2010, Home Antivirus 2010, PC Security 2009, and XP Antivirus 2009. Once installed, the misleading application will ask you to pay for a full version of the program to remove non-existing system security threats. Do not buy this program. Uninstall Antivirus Pro 2010 from your computer as soon possible.

As already mentioned, AntivirusPro2010 is promoted through the use of Braviax infection. This Trojan virus displays fake security alerts in your Windows task bar that promotes the misleading application. Usually it states that your computer is unprotected and that you should activate your antivirus software. The Trojan may also display warnings about various malware infections. While running, AntivirusPro_2010 will impersonate Windows Security Center and state that anti-virus software is outdated or disabled. Do not trust it, it’s a scam.

To make things even worse, Antivirus Pro 2010 will hijack web browsers and redirect you to entirely different websites full of advertisements. What is more, it will block certain security websites and antivirus programs to protect itself from being deleted.

(It may also be attached in a message that you need an ActiveX update)

It may plant an image on a blue desktop (you lose your desktop image, if you have one) and a constant pop-up generates, telling you that a virus has been detected and directs you to a very good replica of a Microsoft page that wants $50 – $100 for the AntivirusPro2010 cure (depending on the package you purchase). It is also POS and also has to be removed.

It still took me 4 hours to clean my folders, files, and registries. I also had to create a new registry to get back my screensaver and desktop background option tabs.
Below are some basic instructions for manually removing this malware. Please read carefully and perform at your own risk!

First, if infected you need to stop the malware program from loading on startup. This is what you do to stop it:

Click “Start,” then, “run”

Type: msconfig

Go to Startup tab

Uncheck lphc35dj0e1an <—– These number/letters may be different

Uncheck rhc75dj0e1an <——- but will be similar to each other. Usually two that are very similar. These were taken from my computer.

Click: apply

Stop AntivirusPro2010 processes

Access Processes by pressing Cont+Alt+Delete simultaneously (1 time)

(All below may or may not be present – stop any found)

vav.exe

2010Antivirus.exe

2010AntivirusUpdate.exe

2010pro.exe

av2010.exe

(Others may be present, but those above give you a general idea of what to look for)

Click: OK

Restart computer

Then you need to delete the main files this program uses. Delete the following files.

C:\windows\system32\lphc35dj0e1an.exe <—— Again, your .exe may be different than these!

C:\program files\rhc75dj0e1an\rhc75dj0e1an.exe

Also, do not forget to do a file and folder search…

Find and Delete these AntivirusPro2010 files:

(may or may not be present – also versions may vary)

avp2010.exe

vav.exe

ava2010.exe

ProAntivirus.exe

2010AntivirusUpdate.exe

2010 antivirus

2010Antivirus.lnk

Uninstall 2010Antivirus.lnk

2010AntivirusPro on the Web.lnk

ProAntivirus.url

Antivirus 2010.lnk

Uninstall Pro Antivirus 2010.lnk

This should remove the program from your system but you probably still have a warning message displayed as your wallpaper in Windows and the virus removed the ability to change the wallpaper or your desktop settings.

To restore ability to change your desktop settings and select a different wallpaper and screen saver do the following:

Click: Start->Run->type: regedit ->click “OK”

Open the following folders\subfolders in order:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\

CurrentVersion\Policies\System

“System” being the last sub-folder.

create new entries:

1) a REG_DWORD entry called: NoDispBackgroundPage

2) a REG_DWORD entry called: NoDispScrSavPage

As long as their values are both set to 0, your tabs will be back.

Restart Computer

Now that your system is back to normal, you can make money as a true webmaster! Created for beginners with no computer skills.

Price Comparison Plugin for Wordpress




Written by:

Filed Under: General Info

Comments

No Comments

Leave a reply

You must be logged in to post a comment. Click here to login.