How to remove Earth AV
Tuesday, July 13th, 2010 at 3:56 amHome » Rogue Antispyware » Earth AV
Earth AV description
EarthAV is a clone of recent Earth Antivirus fraud. The program pretends to be a security application. It insists on buying the program for cyber protection while the real function of Earth AV is infecting computers and milking money from unsuspecting people.
Earth AV spreads with help of trojans and fraudulent websites. Do not download and install EarthAV if you encounter this program on the internet. When installed, Earth AV reports various problems and offers deleting those after user pays for a full version of the program. The paid version does not exist and the infection reports are fabricated. Do not trust Earth AV and remove it as soon as possible. Do not give your money away for such a scam.
Earth AV is a Rogue Antispyware software
How to manually remove Earth AV
To remove Earth AV spyware you must block Earth AV sites, stop and remove processes, unregister DLL files, search and delete all other Earth AV files and registry utility. Follow the Earth AV detection and removal instructions below.
The most typical software removal method is to remove Earth AV by using "Add or Remove Programs" service. However there may be hidden Earth AV files, running processes and registries in your computer, so Earth AV may recreate all other files after reboot.
Earth AV manual removal instructions
Stop and remove Earth AV processes:
eav.exe
msdl.exe
vec.exe
Read more how to kill Earth AV processes
Locate and delete Earth AV registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Earth AV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Earth AV
HKEY_CURRENT_USER\Software\EAV
HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
HKEY_CLASSES_ROOT\AppID\WStech.DLL
HKEY_CLASSES_ROOT\CLSID\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
HKEY_CLASSES_ROOT\WStech.WStechB
HKEY_CLASSES_ROOT\WStech.WStechB.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mxcll"
Read more how to delete Earth AV registry entries
Download RegistryBooster 2010 to scan errors caused by Earth AV
Search and unregister Earth AV DLL libraries:
gsl.dll
WStech.dll
Read more how to unregister Earth AV DLL files
Detect and delete other Earth AV files:
c:\Documents and Settings\All Users\Application Data\eav
c:\Documents and Settings\All Users\Application Data\eav\Base.dat
c:\Documents and Settings\All Users\Application Data\eav\msdl.exe
c:\Documents and Settings\All Users\Application Data\eav\msll.exe
c:\Documents and Settings\All Users\Application Data\eav\vec.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Machine
c:\Documents and Settings\All Users\Application Data\Microsoft\Machine\WStech.dll
c:\Documents and Settings\All Users\Start Menu\Programs\ Earth AV
c:\Documents and Settings\All Users\Desktop\ Earth AV .lnk
%APPDATA%\mozilla\firefox\profiles\\gsl.dll
We strongly recommend you to use spyware remover to track Earth AV and automaticaly remove Earth AV processes, registries and files as well as other spyware threats.



September 3rd, 2010 at 10:27 am
Worked great. Thank you so much!
Reply