How to remove Antivir
Friday, November 27th, 2009 at 4:17 amHome » Rogue Antispyware » Antivir
Antivir description
Don‘t mistake Antivir for a real virus remover. The program is advertised using fraudulent „online scanners“ that invite downloading Antivir as it was a legitimate anti-virus tool. The real purpose of Antivir is milking money from gullible users. The malware is also installed by trojans when people visit one of the fraudulent websites. Antivir hijacks web browser and bugs users with enormous amounts of pop-ups.
Antivir offers full computer protection by loading fabricated security alerts. The pop-ups invite purchasing full version of Antivir for deleting spyware and viruses. None of the problems reported by this fraud is real and the full version is a hoax as well. Don‘t trust notifications displayed by Antivir and don‘t pay for this program.
Get rid of Antivir
Antivir is a Rogue Antispyware software
How to manually remove Antivir
To remove Antivir spyware you must block Antivir sites, stop and remove processes, unregister DLL files, search and delete all other Antivir files and registry utility. Follow the Antivir detection and removal instructions below.
The most typical software removal method is to remove Antivir by using "Add or Remove Programs" service. However there may be hidden Antivir files, running processes and registries in your computer, so Antivir may recreate all other files after reboot.
Antivir manual removal instructions
Block Antivir sites:
browsersecurityaddon.com
prowebantimalware.com
top-rate-scan8.com
computer24protection.com
antivrusfreescan07.com
Read more how to block Antivir sites
Stop and remove Antivir processes:
antivir.exe
Read more how to kill Antivir processes
Locate and delete Antivir registry entries:
HKEY_CURRENT_USER\Software\EVAACD
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
Read more how to delete Antivir registry entries
Download RegistryBooster 2010 to scan errors caused by Antivir
Search and unregister Antivir DLL libraries:
UpdateCheck.dll
Read more how to unregister Antivir DLL files
Detect and delete other Antivir files:
c:\Documents and Settings\All Users\Start Menu\AV
c:\Documents and Settings\All Users\Start Menu\AV\Antivir.lnk
c:\Documents and Settings\All Users\Start Menu\AV\Uninstall.lnk
%UserProfile%\Desktop\Antivir.lnk
c:\Program Files\AV
c:\Program Files\AV\antivir.exe
c:\Program Files\Common Files\Uninstall
c:\Program Files\Common Files\Uninstall\AV
c:\Program Files\Common Files\Uninstall\AV\Uninstall.lnk
c:\WINDOWS\system32\UpdateCheck.dll
We strongly recommend you to use spyware remover to track Antivir and automaticaly remove Antivir processes, registries and files as well as other spyware threats.
November 27th, 2009 at 6:44 am
i am a complete novice i do not understand how to get antivir off my computer its telling me i cant go on safe sites i cant do anythin i usually do!!!
Reply
Luciana Reply:
November 27th, 2009 at 7:08 am
If you find the manual removal too complicated, download some anti-spyware and let it do the job. The websites are blocked by Antivir, this problem will disappear once you delete this malware.
Reply
December 1st, 2009 at 6:33 am
Last night I subscribed to Spyware Doctor, for $29.95 , and have a receipt.
I am still being bombarded with “Antivir” popups !!!!
HELP !!!!! Please
Reply
Luciana Reply:
December 1st, 2009 at 6:52 am
Make sure your anti-spyware is updated. Run a scan and remove everything it finds.
Reply
December 3rd, 2009 at 4:49 pm
ive done almost all the manuel removal steps, but when i tried to delete the registry key files it had one file that couldnt be deleted. then when i tried to unregister the dll files it said it wasnt a valid file. please help!!!
Reply
Jacob Reply:
December 20th, 2009 at 1:19 pm
Try going to task manager and close it in processes then try to delete files thats what i did
Reply
December 4th, 2009 at 7:45 pm
My web browser was caught by AntiVir yesterday and I found it SOO irritating. I then followed your manual steps and now AntiVir is nowhere to be found! I can’t thank you enough for your removal tutorial!!! (:
Reply
December 5th, 2009 at 9:36 pm
This Antivir program just downloaded itself onto my computer when I never even clicked on it! I tried to stop it from installing but to no avail. I deleted everything I could that was associated with it, but now everytime I go onto my usual websites, even my own homepage, it keeps blocking me! I don’t know what to do to get rid of these annoying website blockings!!!
Reply
Luciana Reply:
December 7th, 2009 at 12:13 am
If you deleted every thing related to Antivir, there’s probably another infection ruining your computer. We could help you with the manual removal if we knew the name of the infection. For now, I recommend running anti-spyware.
Reply
January 14th, 2010 at 8:51 am
Thanks so much, I deleted and uninstaled AntiVi and theres no more popups! I Installed AVG and its taking the rest of the viruses off my PC. Thanks!
Reply
February 19th, 2010 at 4:39 pm
if you have difficulty removing updatecheck.dll you need to first unregister it. This is the process to unregister the .dll file for windows xp
Goto your taskmanager and go to processes. Highlight the process called “antivir.exe” (or “av.exe”) and hit the button “end process”. Exit the task manager.
1.) close all applications and open windows that you may have open (so copy these directions or print them out because you can not have this open either.)
2.) select start -> run
3.) Type “CMD”. then hit “OK”. ( a black window will appear)
4.) type “cd C:\” and hit enter(or your local hard drive letter name, typically C)
5.) then type “cd windows” and hit enter
6.) then tpye “cd system32″ and hit enter
7.) now type “regsvr32 /u updatecheck.dll” and hit enter
8.) a windows error message may appaer… its ok just hit OK
9) now try to delete the updatecheck.dll file and it should work…
Reply