How to remove AVG Antivirus 2011
Monday, January 31st, 2011 at 2:35 amHome » Rogue Antispyware » AVG Antivirus 2011
AVG Antivirus 2011 description
Do not mistake the malicious AVG Antivirus 2011 for the real virus remover made by AVG. While AVG is a reputable company which makes lots of useful tools including anti-virus, AVGAntivirus 2011 is a fake program trying to trick people into giving their money away.
AVG Antivirus 2011 spreads via fraudulent websites that feature fake online scanners. When the scam is installed, it keeps loading the fabricated scan results as a mean to push people into purchasing the program. It may cause additional problems such as hijacked web browser and disabled applications.
AVGAntivirus2011 brings loads of counterfeit warnings. Here are some examples of AVG Antivirus 2011 pop-ups:
Warning! Active Virus Detected!
Threat Detected: Email-Worm.Zhelatin
Infected file: [File name]
Action taken: Application Blocked
Description: Worm Email-Worm.Zhelatin.vy is virus-like malware with destructive code, and is able to mutate, replacing its own code by itself. This makes Email-Worm.Zhelatin.vy very dangerous, hard to find, and difficult to delete. Like most viruses, worm Email-Worm-Zhelatin.vy may spread to other computers by secretly emailing themselves to Internet users in your address book.
Warning!
Once installed on your machine, NetPumper may start monitoring your web browsing habits, such as what pages you usually load and what search terms you usually type in the search page. NetPumper may also deliver excessive pop-up advertisements even when you are not browsing the Internet. NetPumper also an ability to slow down your computer performance by using your hard drive recourses in order to deliver advertisements on your computer screen.
Warning! Identity theft attempt detected!
Attacker IP: [Random IP address]
Attack Target: Microsoft Corp. Keys
Description: Remote host tries to get access to your personal information.
About Internet Explorer Emergency Mode
Your PC is infected with malicious software and browse couldn’t be launched
You may use Internet Explorer in Emergency mode – internal service browser of Microsoft Windows system with limited usability.
Notice: Some sites refuse connection with Internet Explorer in Emergency Mode. In such case system warning page will be showed to you.
AVG Antivirus 2011 is a Rogue Antispyware software
How to manually remove AVG Antivirus 2011
To remove AVG Antivirus 2011 spyware you must block AVG Antivirus 2011 sites, stop and remove processes, unregister DLL files, search and delete all other AVG Antivirus 2011 files and registry utility. Follow the AVG Antivirus 2011 detection and removal instructions below.
The most typical software removal method is to remove AVG Antivirus 2011 by using "Add or Remove Programs" service. However there may be hidden AVG Antivirus 2011 files, running processes and registries in your computer, so AVG Antivirus 2011 may recreate all other files after reboot.
AVG Antivirus 2011 manual removal instructions
Stop and remove AVG Antivirus 2011 processes:
OQ4C92F6.exe
avg.exe
iesafemode.exe
Read more how to kill AVG Antivirus 2011 processes
Locate and delete AVG Antivirus 2011 registry entries:
HKEY_CURRENT_USER\Software\A88246
HKEY_CURRENT_USER\Software\Mon246
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AVG Antivirus 2011" = "C:\Program Files\AVG Antivirus 2011\avg.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "WinNT-A8I 28.01.2011"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe "Debugger" = "iesafemode.exe -sb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe "Debugger" = "iesafemode.exe -sb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe "Debugger" = "iesafemode.exe -sb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe "Debugger" = "iesafemode.exe -sb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe "Debugger" = "iesafemode.exe -sb"
Read more how to delete AVG Antivirus 2011 registry entries
Download RegistryBooster 2010 to scan errors caused by AVG Antivirus 2011
Detect and delete other AVG Antivirus 2011 files:
c:\Documents and Settings\All Users\Start Menu\AVG Antivirus 2011\
c:\Documents and Settings\All Users\Start Menu\AVG Antivirus 2011\AVG Antivirus 2011.lnk
c:\Documents and Settings\All Users\Start Menu\AVG Antivirus 2011\Uninstall.lnk
c:\Program Files\AVG Antivirus 2011\
c:\Program Files\AVG Antivirus 2011\avg.exe
c:\WINDOWS\system32\iesafemode.exe
%UserProfile%\Desktop\AVG Antivirus 2011.lnk
%Temp%\OQ4C92F6.exe
We strongly recommend you to use spyware remover to track AVG Antivirus 2011 and automaticaly remove AVG Antivirus 2011 processes, registries and files as well as other spyware threats.



February 1st, 2011 at 9:08 am
Thanks for the instructions, just a couple of notes
in the registry the entries were
HKEY_CURRENT_USER\Software\A88240 not A88246
HKEY_CURRENT_USER\Software\Mon240 not A88246
and the
%Temp%\OQ4C92F6.exe was actually IE7XPGFE.exe
Reply