How to remove WinPC Antivirus

Friday, April 3rd, 2009 at 3:14 am
Home » Rogue Antispyware » WinPC Antivirus

WinPC Antivirus description

WinPC Antivirus is a clone of WinPC Defender. Neither of these programs should be trusted. Click here to remove WinPC Defender.

winpcantivirus

Win PC Antivirus is a corrupt security tool. It displays falsified system scan results. Not only it reports nonexistent infections, but it also tags legitimate files as computer threats. Fortunately, WinPCAntivirus is not able to delete a thing; otherwise the infected computer would crash due to missing files.

WinPC Antivirus is not different from other rogue anti-viruses. It doesn’t function properly and it loads annoying pop-ups till user agrees to pay for the program. Remove Win PCAntivirus with no doubt.

WinPCAntivirus loads fabricated warnings. The two following messages are the most common:

“Update available. WinPC Antivirus has detected that new threat database is available. Would you like to download and install update now? Installation is recommended.”

winpcantiviruspopup

“FIREWALL  WARNING

Hidden file transfer to remote host was detected

WinPC Anrivirus has detected that somebody is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately.

Details of the attack

Remote host transfer IP: 97.216.34.74

Remote user computer name: FORENSICS

User E-mail:

IP-adress:

Blocking is recommended“

WinPC Antivirus infection video

WinPC Antivirus infection video

WinPC Antivirus is a Rogue Antispyware software

How to manually remove WinPC Antivirus

To remove WinPC Antivirus spyware you must block WinPC Antivirus sites, stop and remove processes, unregister DLL files, search and delete all other WinPC Antivirus files and registry utility. Follow the WinPC Antivirus detection and removal instructions below.

The most typical software removal method is to remove WinPC Antivirus by using "Add or Remove Programs" service. However there may be hidden WinPC Antivirus files, running processes and registries in your computer, so WinPC Antivirus may recreate all other files after reboot.

WinPC Antivirus manual removal instructions

Block WinPC Antivirus sites:
winpc-antivirus.com
winpc-antivirus2009.com
win-pc-antivirus2009.com
winpc-antivirus09.com
winpcantivirus2010.com Read more how to block WinPC Antivirus sites

Stop and remove WinPC Antivirus processes:
Ta1HnnaIasEcfgF.exe
pcantivirus.exe
winav.exe Read more how to kill WinPC Antivirus processes

Locate and delete WinPC Antivirus registry entries:
HKEY_CURRENT_USER\Software\WinPC Antivirus
HKEY_CLASSES_ROOT\CLSID\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_CLASSES_ROOT\IEocxApp.IEocx
HKEY_CLASSES_ROOT\IEocxApp.IEocx.1
HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A54DC52D-7AAD-4D40-A126-337211631EDC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_CURRENT_USER\Control Panel\don’t load "scui.cpl"
HKEY_CURRENT_USER\Control Panel\don’t load "wscui.cpl"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysav"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Content" Read more how to delete WinPC Antivirus registry entries
Download RegistryBooster 2010 to scan errors caused by WinPC Antivirus

Search and unregister WinPC Antivirus DLL libraries:
ieocx.dll Read more how to unregister WinPC Antivirus DLL files

Detect and delete other WinPC Antivirus files:
%UserProfile%\Application Data\pcantivirus.exe
%UserProfile%\Desktop\WinPC Antivirus.LNK
%UserProfile%\Start Menu\WinPC Antivirus.LNK
C:\Documents and Settings\All Users\Ta1HnnaIasEcfgF.exe
c:\WINDOWS\ieocx.dll
winav.exe

We strongly recommend you to use spyware remover to track WinPC Antivirus and automaticaly remove WinPC Antivirus processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , , ,

40 Responses to

WinPC Antivirus

  1. Michael Monk
    May 12th, 2009 at 2:41 pm

    I have the WinPC antivirus & I have downloaded both Spyware Doctor & Spybot search & destroy & neither have worked! Suggestions?

    Thanks

    Reply

    Luciana Reply:
    May 12th, 2009 at 10:13 pm

    Boot your PC in a safe mode and run some of the anti-spyware you get. There’s a chance of WinPC Antivirus blocking your security tools in normal mode. I also strongly recommend the manual removal.

    Reply

  2. Dan Walsh
    May 12th, 2009 at 9:51 pm

    I got hit with this trojan a few days ago, and it messed up my system so it couldn’t last 10 minutes without crashing. None of the programs I downloaded (even the recommended tool) would remove it, so I followed these instructions.
    Perfect!
    Got my system working fine again, I really appreciate the detailed instructions. I didn’t have any knowledge about .dll files but the instructions made it very clear and easy.
    Thanks!

    Reply

    Erin Linde Reply:
    May 15th, 2009 at 7:23 am

    I am having the same issue as you Dan. Where did you see the detailed instructions. I’m a little nervous to remove this trojan manually but have no other alternative. None of the downloaded programs work. – they won’ t open.
    Can you tell me where you saw the detailed instructions? I’m a little confused on deleting .dll files and the other files. I’m not sure where to go to find them and delete.
    Thanks a million!!!!

    Reply

    bryan Reply:
    May 17th, 2009 at 7:57 am

    Erin Linde,
    instructions are above these comments or just click this link: http://www.spywarevoid.com/remove-winpc-antivirus-win-pc-antivirus-removal.html#manual_removal

    Reply

  3. rebecca
    May 16th, 2009 at 2:04 am

    I tried the manual removal, but i couldnt find some of the registry entries, or any of the processes.

    And WinPC anti virus windows, pop up every 2-4 minutes! HELP PLEASE!

    Reply

    bryan Reply:
    May 17th, 2009 at 8:33 am

    Sometimes files, processes, registry entries may differ. I suggest boot computer in safe mode and run auto software scanner to find infection

    Reply

    rebecca Reply:
    May 17th, 2009 at 11:32 am

    What auto software?!? how?? … i get all the press f8 stuff, but i what (is) auto software scanner? spyware docter found the infection- but it wont remove it. And i followed the manual instructions but as i said above. i couldnt find some of the things i was supposed to delete!!

    Help please.

    Reply

    jane Reply:
    May 17th, 2009 at 10:44 pm

    Boot in safe mode and scan with Spyware Doctor. Then you can manually remove what it has found (following manual removal guide above), or purchase licence and do auto remove.

    Luciana Reply:
    May 18th, 2009 at 1:09 am

    Spyware Doctor is not the one and only way to delete WinPC Antivirus. Manual removal is effective as well. You shouldn’t worry if some of the malicious files or registry entries are not installed on your PC. They may vary on each computer. To make it simple: the less malicious files you have, the better. Remove the ones you can locate.

  4. luke (15)
    May 17th, 2009 at 3:06 am

    okay so my computer has winpc antivirus and it’s got 2 the point were i cnt even open internet page let alone downlaod sumthin now thsi 1 is open be4 this new problem occured? and hwo did norton 2k9 let this onto here answers wud be nice. ty

    Reply

  5. Dominic
    May 23rd, 2009 at 8:54 am

    I have this winpc antivirus threat on my pc and have been trying all day to get rid of it. I purchased Spyware Doctor for £29.99 and although it detected the treat and removed it, once the PC was rebooted it re-appeared again. What a waste of £29.99! any suggestions as I am not confident enough to manually remove it.

    Reply

    Luciana Reply:
    May 24th, 2009 at 10:33 pm

    Run the scan again in a safe mode. This way it should be more effective. Make sure your Spyware Doctor is updated.

    Reply

    Melanie Reid Reply:
    May 26th, 2009 at 7:07 am

    Right click the icon and it deletes! I had same problem, but it does work, well it did for me,

    Reply

    Dominic Reply:
    June 3rd, 2009 at 1:10 am

    I located the winav.ex process in task manager and then stopped the process, then I deleted the WIN PC Antivurus file and bingo it appears to have gone now. No traces are found when I run spyware doctor. Only problem now, not sure if it is connected is I keep getting re-directed when using google mainly when searching for spyware information, only effecting google searches, very strange, spyware doctor doesn’t find an infection! any idea’s please.

    The other strange thing I haven’t mentioned is when I first was made aware of the WIN PC antivirus infection I kept getting a strange song playing on the PC with lyrics saying I’ll be back, even though I wasn’t connected to any program or the internet, very spooky!

    Reply

  6. Francesco A.A. Mastracchio
    May 24th, 2009 at 8:06 pm

    If so much is known about this WinPC Antivirus program being a scam, and people are submitting their credit card numbers to them to “activate” their program, then why isn’t there some sort of law enforcement action on these internet criminals. Perhaps the F.B.I. should be investigating them?

    Reply

  7. NIC
    May 25th, 2009 at 9:22 am

    SYSTEM RESTORE WILL DO IT ,IT DID MINE OK.

    Reply

  8. NIC
    May 25th, 2009 at 9:22 am

    SYSTEM RESTORE WORKS FINE,

    Reply

  9. Louis
    May 25th, 2009 at 11:12 am

    I have managed to do as much of the manual remove as possible and I am not getting this WinPC popping up every 5 seconds anymore. However I still cannot open the internet and when I do, I cannot type anything into a search engine (Google toolbar) without it then closing or just rejecting my search! Help?

    Reply

    Luciana Reply:
    May 25th, 2009 at 10:10 pm

    Run anti-spyware scan. Apparently there are some malware left on your PC.

    Reply

  10. Elle
    May 26th, 2009 at 4:48 am

    Also block winpcantivirus2010.com

    Reply

    Luciana Reply:
    May 26th, 2009 at 5:43 am

    Thank you, we added this website to the list of malicious domains.

    Reply

  11. jim smith
    May 26th, 2009 at 6:25 am

    How do you prevent these WinPC banners from poping up constantly? It’s really a pain. Thanks, Jim

    Reply

    Luciana Reply:
    May 26th, 2009 at 9:54 pm

    Remove WinPC Antivirus and the pop-ups will be gone as well. You can either delete the malware manually or you can download automatic removal tool.

    Reply

    Jake Reply:
    June 2nd, 2009 at 12:52 pm

    Go to taskmanager (Ctrl+Alt+Del, Ctrl+Shift+Esc) and go to the “Processes tab”. click on “Image Name” to get the list of items in alphebetical order. Then, near the bottom, find winav.exe and click “End Process”. This will stop the flow of the popups and delete the file without the annoyance of the popups. Manual deletion of the file is recommended.

    Reply

    Erica Reply:
    December 9th, 2009 at 11:38 pm

    i believe i still have the virus on my computer. i went to the processes tab like you said but instead of finding winav.exe i found winlogon.exe. should i delete the file? i really want to get rid of this darn virus it’s really making the computer run slow. thanks!

    Reply

    bryan Reply:
    December 9th, 2009 at 11:44 pm

    No, winlogon.exe is a process belonging to the Windows login manager. This process is not malicious. ref http://www.spywared.com/processes/winlogon.exe

  12. Melanie Reid
    May 26th, 2009 at 7:05 am

    Hey I have just spent all day trying to delete winpc antivirus and Ive finally done it!! I used spyware doctor then had to reboot, icon was still there but no pop ups! After a right click and delete it finaly was gone!!

    Reply

  13. Esther
    May 26th, 2009 at 10:21 am

    I have followed the above instructions and it appears to have been really successful (as well as stopping the above processes, stopping ”winax.exe” as receommended on another site seemed to curtail the constant pop-ups).

    The only problem is that I can’t delete the ”c:\WINDOWS\ieocx.dll” file (have unregistered ”ieocx.dll” ok), as I get the message ‘Make sure the disc is not full or write protected and that the file is not currently is use’. Any suggestions? :|

    Reply

    Luciana Reply:
    May 26th, 2009 at 9:57 pm

    Try to delete the dll in a safe mode. It’s most likely in use when you try to remove it.

    Reply

  14. Loz
    May 27th, 2009 at 4:11 am

    I have followed all the steps in manual removal, but have just seen that i have not unregister ieocx.dll before deleting now when i try to unregister it, it says file cannot be found also now everytime i start my cpu up it freeze’s. It now will only boot up in safe mode any help would be much appreciated thanks!

    Reply

    Luciana Reply:
    May 27th, 2009 at 5:41 am

    You can’t unregistered the dll because there’s no such dll on your computer. Restore your system to a previous date.

    Reply

  15. charlie
    May 27th, 2009 at 5:23 pm

    i cant delete winav.exe everytime i try a pop-up comes up and says ‘Make sure the disc is not full or write protected and that the file is not currently is use’. and i deleted all of the stuff that i could find but the anti-virus pop-ups keep on comming. so what should i do?

    Reply

    Luciana Reply:
    May 27th, 2009 at 11:05 pm

    Open your Task Manager and stop the process and then delete it. You won’t be able to remove the file while it’s running. I also recommend going through the manual removal in a safe mode.
    There’s a chance of other malware residing on your PC besides the one you removed. Run anti-spyware scan to check the things.

    Reply

  16. Jezza
    May 28th, 2009 at 3:03 am

    I’ve removed everything manually, but when I start the computer up in normal mode it is still freezing and still redirecting me to its site (which is blocked now). There are also errors appearing. What should I do?

    Reply

    Jezza Reply:
    May 28th, 2009 at 8:14 pm

    I also found another .dll to do with WinPC Antivirus. Its is
    HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run “AVScan.dll” and its value is C:\Documents and Settings\\Application Data\winav.exe

    Should I delete it? I’ve als found 2 other trojans on the computer that could’ve let throught this program. They are Trojan.Agent and Trojan.Inject!ct

    I found them in the registry too, but wasn’t sure whether to delete it or not

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»