How to remove Antivirus Scan

Wednesday, December 22nd, 2010 at 4:21 am
Home » Rogue Antispyware » Antivirus Scan

Antivirus Scan description

Antivirus Scan is a new version of the pesky Antivirus Action fraud. Although it’s named Antivirus Scan, it is neither able to scan a computer nor is it able to detect infections. AntivirusScan is good at imitating check reports.

Antivirus Scan should not be taken as a real security program. Under no circumstances buy the tool! Antivirus Scan puts lots of efforts to look like a useful thing while in a real world it doesn’t function as antispyware.  It fabricates tons of security warnings trying to intimidate its victims. It may also redirect web browser to malicious websites.

Here are some examples of Antivirus Scan alerts:

Internet Explorer Warning – visiting this web site may harm your computer!
Most likely causes:
- The website contains exploits that can launch a malicious code on your computer
- Suspicious network activity detected
- There might be an active spyware running on your computer

Antivirus software alert
Infiltration alert
Your computer is being attacked by an Internet virus. It could be password-stealing attack, a trojan-dropper or similar.

Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Antivirus Scan is a Rogue Antispyware software

How to manually remove Antivirus Scan

To remove Antivirus Scan spyware you must block Antivirus Scan sites, stop and remove processes, unregister DLL files, search and delete all other Antivirus Scan files and registry utility. Follow the Antivirus Scan detection and removal instructions below.

The most typical software removal method is to remove Antivirus Scan by using "Add or Remove Programs" service. However there may be hidden Antivirus Scan files, running processes and registries in your computer, so Antivirus Scan may recreate all other files after reboot.

Antivirus Scan manual removal instructions

Block Antivirus Scan sites:
afantispy.com
colemes.net
softwareea.com
softwarear.com
safeom.com
guardpe.com
marezer.com
antispyis.com
softwaresh.com
programmci.com
protectep.com
Read more how to block Antivirus Scan sites

Locate and delete Antivirus Scan registry entries:
HKEY_CURRENT_USER\Software\qnpn7rjv93lf
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:59274"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
Read more how to delete Antivirus Scan registry entries
Download RegistryBooster 2010 to scan errors caused by Antivirus Scan

Detect and delete other Antivirus Scan files:
%Documents and Settings%\All Users\Start Menu\Programs\Antivirus Scan
%Documents and Settings%\All Users\Desktop\Antivirus Scan.lnk
%Documents and Settings%\All Users\Application Data\Antivirus Scan
%Documents and Settings%\[UserName]\Local Settings\Application Data\[random]\[random].exe

We strongly recommend you to use spyware remover to track Antivirus Scan and automaticaly remove Antivirus Scan processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

6 Responses to

Antivirus Scan

  1. Huss

    I have just recently been attacked by this garbage virus. I am getting pop up warnings every minute or so, and it wont let me open task manager to end unwanted processes.

    I also get the lower right corner popping up and telling me that bankerfox.a and nuqel.E is infected in my computer and possibly stealing information. I have since disabled my internet connection, but cant get rid of this demon. I have Norton and thought it would block things like this from even getting to my computer, but it happened and annoys me. Norton Full scan didnt find anything in normal mode and I am currently in safe mode trying another scan.

    At least there are no warnings or popups in safe mode.

    Is there an executable that may be starting these files once the PC is started in normal mode? I cant find or locate them, and running in normal mode is annoying with the popups. Any suggestions. I dont like to delete files manually, but I may have to.

    Reply

    Luciana Reply:

    First of all, bankerfox.a and nuqel.E are not real threats. Those are just names made up by Antivirus Scan fraud to trick people into buying the fake program. So you enable the internet connection.
    I understand that manual removal is risky and it may look quite complicated. If you don’t want to delete files on your own, why don’t you use anti-spyware? The program you’ve mentioned is anti-virus. It is not meant to deal with infections like Antivirus Scan. Antivirus and Antispyware tools work on different infections.

    Reply

    Huss Reply:

    any suggestions for an anti spyware program?

    Reply

    Luciana Reply:

    How about Spyware Doctor? It’s very reputable program.

  2. J

    I recently got attacked, but because I’m using a laptop it only one account was affected when I switched to the guest account it was not there. I thought that deleting my account would stop it, but when i recreated another account it was back again. How can I get rid of it and stop it from reappearing?

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here