Comments on: WinPC Antivirus

By: bryan

bryan — Thu, 10 Dec 2009 07:44:11 +0000

No, winlogon.exe is a process belonging to the Windows login manager. This process is not malicious. ref http://www.spywared.com/processes/winlogon.exe

By: Erica

Erica — Thu, 10 Dec 2009 07:38:17 +0000

i believe i still have the virus on my computer. i went to the processes tab like you said but instead of finding winav.exe i found winlogon.exe. should i delete the file? i really want to get rid of this darn virus it’s really making the computer run slow. thanks!

By: Dominic

Dominic — Wed, 03 Jun 2009 09:10:33 +0000

I located the winav.ex process in task manager and then stopped the process, then I deleted the WIN PC Antivurus file and bingo it appears to have gone now. No traces are found when I run spyware doctor. Only problem now, not sure if it is connected is I keep getting re-directed when using google mainly when searching for spyware information, only effecting google searches, very strange, spyware doctor doesn’t find an infection! any idea’s please.

The other strange thing I haven’t mentioned is when I first was made aware of the WIN PC antivirus infection I kept getting a strange song playing on the PC with lyrics saying I’ll be back, even though I wasn’t connected to any program or the internet, very spooky!

By: Jake

Jake — Tue, 02 Jun 2009 20:52:50 +0000

Go to taskmanager (Ctrl+Alt+Del, Ctrl+Shift+Esc) and go to the “Processes tab”. click on “Image Name” to get the list of items in alphebetical order. Then, near the bottom, find winav.exe and click “End Process”. This will stop the flow of the popups and delete the file without the annoyance of the popups. Manual deletion of the file is recommended.

By: Jezza

Jezza — Fri, 29 May 2009 04:14:18 +0000

I also found another .dll to do with WinPC Antivirus. Its is
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run “AVScan.dll” and its value is C:\Documents and Settings\\Application Data\winav.exe

Should I delete it? I’ve als found 2 other trojans on the computer that could’ve let throught this program. They are Trojan.Agent and Trojan.Inject!ct

I found them in the registry too, but wasn’t sure whether to delete it or not

By: Jezza

Jezza — Thu, 28 May 2009 11:03:26 +0000

I’ve removed everything manually, but when I start the computer up in normal mode it is still freezing and still redirecting me to its site (which is blocked now). There are also errors appearing. What should I do?

By: Luciana

Luciana — Thu, 28 May 2009 07:05:02 +0000

Open your Task Manager and stop the process and then delete it. You won’t be able to remove the file while it’s running. I also recommend going through the manual removal in a safe mode.
There’s a chance of other malware residing on your PC besides the one you removed. Run anti-spyware scan to check the things.

By: charlie

charlie — Thu, 28 May 2009 01:23:21 +0000

i cant delete winav.exe everytime i try a pop-up comes up and says ‘Make sure the disc is not full or write protected and that the file is not currently is use’. and i deleted all of the stuff that i could find but the anti-virus pop-ups keep on comming. so what should i do?

By: Luciana

Luciana — Wed, 27 May 2009 13:41:54 +0000

You can’t unregistered the dll because there’s no such dll on your computer. Restore your system to a previous date.

By: Loz

Loz — Wed, 27 May 2009 12:11:21 +0000

I have followed all the steps in manual removal, but have just seen that i have not unregister ieocx.dll before deleting now when i try to unregister it, it says file cannot be found also now everytime i start my cpu up it freeze’s. It now will only boot up in safe mode any help would be much appreciated thanks!

By: WinPC Antivirus Firewall Warning

WinPC Antivirus Firewall Warning — Wed, 27 May 2009 08:24:21 +0000

[...] Follow this link to delete WinPC Antivirus. [...]

By: Remove Winpcantivirus2010.com hijacker, Winpcantivirus2010.com removal

Remove Winpcantivirus2010.com hijacker, Winpcantivirus2010.com removal — Wed, 27 May 2009 07:55:54 +0000

[...] is dedicated to selling WinPC Antivirus software. The website is not malicious but it’s dangerous because it tricks visitors into taking [...]

By: Luciana

Luciana — Wed, 27 May 2009 05:57:08 +0000

Try to delete the dll in a safe mode. It’s most likely in use when you try to remove it.

By: Luciana

Luciana — Wed, 27 May 2009 05:54:27 +0000

Remove WinPC Antivirus and the pop-ups will be gone as well. You can either delete the malware manually or you can download automatic removal tool.

By: Esther

Esther — Tue, 26 May 2009 18:21:37 +0000

I have followed the above instructions and it appears to have been really successful (as well as stopping the above processes, stopping ”winax.exe” as receommended on another site seemed to curtail the constant pop-ups).

The only problem is that I can’t delete the ”c:\WINDOWS\ieocx.dll” file (have unregistered ”ieocx.dll” ok), as I get the message ‘Make sure the disc is not full or write protected and that the file is not currently is use’. Any suggestions?

By: Melanie Reid

Melanie Reid — Tue, 26 May 2009 15:07:11 +0000

Right click the icon and it deletes! I had same problem, but it does work, well it did for me,

By: Melanie Reid

Melanie Reid — Tue, 26 May 2009 15:05:18 +0000

Hey I have just spent all day trying to delete winpc antivirus and Ive finally done it!! I used spyware doctor then had to reboot, icon was still there but no pop ups! After a right click and delete it finaly was gone!!

By: jim smith

jim smith — Tue, 26 May 2009 14:25:38 +0000

How do you prevent these WinPC banners from poping up constantly? It’s really a pain. Thanks, Jim

By: Luciana

Luciana — Tue, 26 May 2009 13:43:04 +0000

Thank you, we added this website to the list of malicious domains.

By: Elle

Elle — Tue, 26 May 2009 12:48:46 +0000

Also block winpcantivirus2010.com

By: Luciana

Luciana — Tue, 26 May 2009 06:10:44 +0000

Run anti-spyware scan. Apparently there are some malware left on your PC.

By: Louis

Louis — Mon, 25 May 2009 19:12:26 +0000

I have managed to do as much of the manual remove as possible and I am not getting this WinPC popping up every 5 seconds anymore. However I still cannot open the internet and when I do, I cannot type anything into a search engine (Google toolbar) without it then closing or just rejecting my search! Help?

By: NIC

NIC — Mon, 25 May 2009 17:22:58 +0000

SYSTEM RESTORE WORKS FINE,

By: NIC

NIC — Mon, 25 May 2009 17:22:33 +0000

SYSTEM RESTORE WILL DO IT ,IT DID MINE OK.

By: Luciana

Luciana — Mon, 25 May 2009 06:33:05 +0000

Run the scan again in a safe mode. This way it should be more effective. Make sure your Spyware Doctor is updated.

By: Francesco A.A. Mastracchio

Francesco A.A. Mastracchio — Mon, 25 May 2009 04:06:13 +0000

If so much is known about this WinPC Antivirus program being a scam, and people are submitting their credit card numbers to them to “activate” their program, then why isn’t there some sort of law enforcement action on these internet criminals. Perhaps the F.B.I. should be investigating them?

By: Dominic

Dominic — Sat, 23 May 2009 16:54:18 +0000

I have this winpc antivirus threat on my pc and have been trying all day to get rid of it. I purchased Spyware Doctor for £29.99 and although it detected the treat and removed it, once the PC was rebooted it re-appeared again. What a waste of £29.99! any suggestions as I am not confident enough to manually remove it.

By: win-pc-antivirus-2009.com Malicious Website

win-pc-antivirus-2009.com Malicious Website — Tue, 19 May 2009 07:25:46 +0000

[...] win-pc-antivirus-2009.com is a part of an online scam and one of the numerous websites that promote a fake security software WinPC Antivirus. [...]

By: Luciana

Luciana — Mon, 18 May 2009 09:09:51 +0000

Spyware Doctor is not the one and only way to delete WinPC Antivirus. Manual removal is effective as well. You shouldn’t worry if some of the malicious files or registry entries are not installed on your PC. They may vary on each computer. To make it simple: the less malicious files you have, the better. Remove the ones you can locate.

By: jane

jane — Mon, 18 May 2009 06:44:33 +0000

Boot in safe mode and scan with Spyware Doctor. Then you can manually remove what it has found (following manual removal guide above), or purchase licence and do auto remove.

By: rebecca

rebecca — Sun, 17 May 2009 19:32:14 +0000

What auto software?!? how?? … i get all the press f8 stuff, but i what (is) auto software scanner? spyware docter found the infection- but it wont remove it. And i followed the manual instructions but as i said above. i couldnt find some of the things i was supposed to delete!!

Help please.

By: bryan

bryan — Sun, 17 May 2009 16:33:52 +0000

Sometimes files, processes, registry entries may differ. I suggest boot computer in safe mode and run auto software scanner to find infection

By: bryan

bryan — Sun, 17 May 2009 15:57:47 +0000

Erin Linde,
instructions are above these comments or just click this link: http://www.spywarevoid.com/remove-winpc-antivirus-win-pc-antivirus-removal.html#manual_removal

By: luke (15)

luke (15) — Sun, 17 May 2009 11:06:30 +0000

okay so my computer has winpc antivirus and it’s got 2 the point were i cnt even open internet page let alone downlaod sumthin now thsi 1 is open be4 this new problem occured? and hwo did norton 2k9 let this onto here answers wud be nice. ty

By: rebecca

rebecca — Sat, 16 May 2009 10:04:27 +0000

I tried the manual removal, but i couldnt find some of the registry entries, or any of the processes.

And WinPC anti virus windows, pop up every 2-4 minutes! HELP PLEASE!

By: Erin Linde

Erin Linde — Fri, 15 May 2009 15:23:56 +0000

I am having the same issue as you Dan. Where did you see the detailed instructions. I’m a little nervous to remove this trojan manually but have no other alternative. None of the downloaded programs work. – they won’ t open.
Can you tell me where you saw the detailed instructions? I’m a little confused on deleting .dll files and the other files. I’m not sure where to go to find them and delete.
Thanks a million!!!!

By: winpc-antivirus2009.com fake WinPC Antivirus security website

winpc-antivirus2009.com fake WinPC Antivirus security website — Thu, 14 May 2009 12:40:37 +0000

[...] You should block this website using HOSTS file and read more about WinPC Antivirus threat. [...]

By: Luciana

Luciana — Wed, 13 May 2009 06:13:25 +0000

Boot your PC in a safe mode and run some of the anti-spyware you get. There’s a chance of WinPC Antivirus blocking your security tools in normal mode. I also strongly recommend the manual removal.

By: Dan Walsh

Dan Walsh — Wed, 13 May 2009 05:51:04 +0000

I got hit with this trojan a few days ago, and it messed up my system so it couldn’t last 10 minutes without crashing. None of the programs I downloaded (even the recommended tool) would remove it, so I followed these instructions.
Perfect!
Got my system working fine again, I really appreciate the detailed instructions. I didn’t have any knowledge about .dll files but the instructions made it very clear and easy.
Thanks!

By: Michael Monk

Michael Monk — Tue, 12 May 2009 22:41:42 +0000

I have the WinPC antivirus & I have downloaded both Spyware Doctor & Spybot search & destroy & neither have worked! Suggestions?

Thanks