How to remove Antivirus Action

Monday, October 11th, 2010 at 3:26 am
Home » Rogue Antispyware » Antivirus Action

Antivirus Action description

Antivirus Action is a clone of AntivirusIS fraud and it is as annoying as its predecessor. Antivirus Action does not take any action against viruses on your computer because AntivirusAction itself is a computer infection.

Antivirus Action is disguised to look like a security tool but don’t let its appearance to misguide you. The fraud spreads with help of other malware. It may also be installed automatically using system’s exploits while browsing the web.

AntivirusAction is able to mimic functions of a virus remover. It imitates computer scan and security warnings.  The scan reports and the fake infection alerts are meant to push people into paying for using the fraudulent program. Avoid the trap and remove Antivirus Action as soon as possible.

Here are examples of counterfeit alerts displayed by Antivirus Action:

Internet Explorer Warning – visiting this web site may harm your computer!
Most likely causes:
- The website contains exploits that can launch a malicious code on your computer
- Suspicious network activity detected
- There might be an active spyware running on your computer
What you can try:
- Purchase Antivirus System PRO for secure Internet surfing (Recommended).
- Check your computer for viruses and malware.
- More information

INFILTRATION ALERT
Your computer is being attacked by a Internet Virus. It could be a password stealing attack, a trojan – dropper or similar.
DETAILS
Threat: Win32/Nuqel.E
Do you want to block this attack?


Application cannot be executed.
The file [Program name].exe is infected. Do you want to activate your antivirus software now?

Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Antivirus Action is a Rogue Antispyware software

How to manually remove Antivirus Action

To remove Antivirus Action spyware you must block Antivirus Action sites, stop and remove processes, unregister DLL files, search and delete all other Antivirus Action files and registry utility. Follow the Antivirus Action detection and removal instructions below.

The most typical software removal method is to remove Antivirus Action by using "Add or Remove Programs" service. However there may be hidden Antivirus Action files, running processes and registries in your computer, so Antivirus Action may recreate all other files after reboot.

Antivirus Action manual removal instructions

Block Antivirus Action sites:
antisywire.com
antispydot.com
antispydot.net
antispytag.com
antivirnet.com
antispytask.com
antispytask.net
antispyway.com
antivirsnow.com
antispyroad.com
antivirstress.com
antispylake.com
homecomputertools.net
lamebabe.com
pcsecurityland.com
svetore.com
avtinan.com
boxed.info
siegare.com
ipdack.com
avtain.com
dioging.com
avsoftwareport.com
safetymans.com Read more how to block Antivirus Action sites

Stop and remove Antivirus Action processes:
agnz.exe Read more how to kill Antivirus Action processes

Locate and delete Antivirus Action registry entries:
HKEY_CURRENT_USER\Software\
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:33921"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[Random symbols]agnz.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[Random symbols]agnz.exe" Read more how to delete Antivirus Action registry entries
Download RegistryBooster 2010 to scan errors caused by Antivirus Action

Detect and delete other Antivirus Action files:
%Temp%\[Random symbols]\[Random symbols]agnz.exe

We strongly recommend you to use spyware remover to track Antivirus Action and automaticaly remove Antivirus Action processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

23 Responses to

Antivirus Action

  1. Ali
    October 13th, 2010 at 12:46 pm

    I have this on my computer, but the virus won’t let me go online. What should I do? I can’t download any internet removal tools from that computer. Th only way I’m reading this is through another computer.

    Reply

    Luciana Reply:
    October 14th, 2010 at 1:10 am

    You can download removal tool on another computer and then copy the installation files on the infected PC using USB key.

    Reply

  2. Nikki
    October 14th, 2010 at 9:11 am

    you can also restart your computer but before it starts up click f8 to bring up the safe mode screen … then start your computer in safe mode with networking …. go to internet & go to tools – internet options … click on connections then LAN settings … then unclick “use a proxy service for your LAN” … then you should be able to get online

    Reply

  3. Mark
    October 14th, 2010 at 3:39 pm

    Restart the computer and hold down the F8 key before windows starts. Select safe mode with networking. Once the system is available, start Internet Explorer and go to Tools/Options. Then select the Connections tab and then the LAN Setting button. Uncheck the proxy box and select OK. You should then be able to access any required websites.

    Reply

  4. Reece
    October 15th, 2010 at 9:42 pm

    i need serious help with this, it won’t let me open any file, i can transfer from another computer to my laptop and download the files from the internet but then the anti virus action file prevents EVERYTHING from opening

    Reply

    Luciana Reply:
    October 17th, 2010 at 9:47 pm

    Boot your computer in a safe mode. Most of malicious processes do not load in the safe mode so they don’t block regular applications.

    Reply

  5. Mark
    October 16th, 2010 at 4:33 pm

    I also got this virus, but i dont know what kind of program i need to remove it with??

    Reply

    Luciana Reply:
    October 17th, 2010 at 9:49 pm

    You need an anti-spyware to remove this kind of infection

    Reply

  6. dick
    October 18th, 2010 at 5:47 pm

    It seems to be associated with the user temp files. I was able to regain control of the computer by creating another user account as an admin. Since I knew the infection occurred in the past 2 days I searched the entire C drive for *.exe files with a mod date in the past 2 days. There was only 1 such file on my system and after I deleted it and rebooted the system the original user was again able to run. It doesn’t seem to be a real virus, at least my virus scan did not find it as a virus. It appears to me to be a file that runs when a user logs on and writes these phony messages, which explains why creating a new user seems to work.

    I should add I had to start the system in safe mode to create the new user. Also, I deleted 2 of the keys in the registry as suggested above. I did not find a phishing key on my system.

    Reply

  7. hellppp
    October 21st, 2010 at 3:37 pm

    So i got this virus while looking for antivirus programs and i got the BSOD and my computer restarted. Whenever i turn on the computer in normal mode, the “antivirus action” program starts up and i get the BSOD again. But when i try to turn my computer on in safe mode with networking the computer stalls and then restarts again. I’m not sure how to beat this virus if i cant get on safemode

    Reply

  8. Greg
    October 24th, 2010 at 1:01 pm

    Ok, action anti-virus has completely taken over my computer. I tried to get rid of it using comand prompt in safe mode and unchecking the LAN thing but that doesn’t work. Can someone please tell me a real anti-virus I can download to get rid of this?

    Reply

    Luciana Reply:
    October 25th, 2010 at 2:36 am

    Antivirus might be unable to help you in this situation. You need antispyware to delete infections like Antivirus Action. Antivirus and antispyware programs detect different things, but some virus removers are able to delete fraudulent apps as well. However you can save you money and delete antivirus action on your own instead of purchasing some tool. The manual removal guide is above the comments section.

    Reply

  9. Bill
    November 10th, 2010 at 4:21 pm

    The easiest way I’ve found to remove this program is :
    1. turn off computer
    2. restart and hit f8
    3. start in safe mode
    4. system tools – system restore
    5. pick a earlier date – before this program took over
    6. after restore is complete, the program should be gone.
    7. This has worked for me twice.

    Reply

  10. Derek
    November 28th, 2010 at 9:27 pm

    I just did a system restore, I am extremely worried that this virus has stolen passwords to banking info ect…is this probable with this virus? Did anyone else have serious effects from this virus? Should I now change all my passwords?

    Reply

    Gary Reply:
    December 12th, 2010 at 11:21 am

    I had the same problem with the Anti virus Action . The only thing that did work for me was to do a system restore and that seemed to solve the problem at least for now . As to your banking info that depends on whether or not you stored that info in your computer but as the old saying goes . When in doubt change things out . Better safe than sorry . I had none of that info on mine but I did have someone about a month ago that hacked my email account . Fortunate for me I caught it with in a day or two and before they could do some serious damage . My email is the same but I changed every thing else . My password and my security questions if I needed to recover my password . On yahoo mail you can also create your own signature sign in seal . To which I did not have before but that is what I did . It’s a picture that you chose bordered by a color of your choice . They give you at least 40 or 50 colors or so to chose from . This seal is specifically designed for you and your account when you sign in to your email . Works on the same idea sort of like cookies that I. D. your computer when you return to a site . Even if some one has hacked your email account before they can not have your seal after you have created one . That is to say they never could have hacked a account if you start out with one . It’s virtually a fail safe method for signing in to your email account. Hope this helps you out . Happy Holidays , Gary .

    Reply

  11. Mike G.
    December 6th, 2010 at 7:41 pm

    Please help! I have this stupid Antivirus Action on my CPU too, however, safe mode is completely blocked out. When I select safe mode it just starts to go into a list of hkey files and then restarts. Does anyone know how to get in to remove this without safe mode?? Anyone?? Please…

    Reply

    Gary Reply:
    December 12th, 2010 at 11:40 am

    Try system restore . That is what I did . It seems to work . At least it did for me . This can be done from safe mode as well as normal mode . Go to start . Then to all programs . Then to accessories . Then to system tools . This will bring up another window of 9 items . System restore is on that window or it should be . Click on the system restore and follow the prompts . Hope this helps . Happy Holidays, Gary.

    Reply

    Charles Reply:
    December 13th, 2010 at 12:03 pm

    I tried a number of other solutions. Finally one that worked. Thanks Gary.

    Reply

    Gary Reply:
    December 17th, 2010 at 10:54 pm

    Your welcome Charles .Glad to hear things have worked out for you . Ever since I have did the system restore about a week ago I have had no problems . Happy Holidays ,Gary .

    Reply

  12. Tim
    December 9th, 2010 at 5:31 pm

    I followed Bill’s instructions and it worked on my laptop. However, understand from my IT tech at work, that it might come back. Time will tell. He had to reinstall Windows on 2 desktops.

    Not sure where it came from, but time line points towards my wife’s facebook or trip advisor session.

    Reply

  13. Jessica
    December 13th, 2010 at 6:17 pm

    I’m about to try the system restore but I’m afraid the virus will come back. Should I do just a system restore or should I purchase an AntiSpyware software and get rid of it that way? And it needs to be antispyware, and not antivirus, correct? What software would you recommend?
    Thank you for all your help :)

    Reply

    Luciana Reply:
    December 13th, 2010 at 11:51 pm

    The System restore can get the malware out but it won’t protect your computer. While antispyware program can delete the infection and prevent it and other infections from coming on board.

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»