Tuesday, June 10, 2008

Manual Antivirus 2008 removal



Important Note: Although it is possible to manually remove Antivirus 2008, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.

Remove these Antivirus 2008 processes:
Antvrs.exe
AntiVirus2008.exe
AntvrsInstall.exe
AntvrsInstall[1].exe

Remove these Antivirus 2008 DLL files:
shlwapi.dll
wininet.dll

Remove these Antivirus 2008 Registry files:
Microsoft\Code Store Database\Distribution Units\3BA4271E-5C1E-48E2-B432-D8BF420DD31D
HKEY_USERS\Software\antivirus 2008
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antivirus"
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Antivirus
Software\Microsoft\Windows\CurrentVersion\RunOnce\3P_UDEC
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC"

Remove these Antivirus 2008 files:
shlwapi.dll
wininet.dll
AntiVirus 2008.lnk
Uninstall Antivirus.lnk
AntiVirus2008.exe
AntvrsInstall.exe
AntvrsInstall[1].exe
Antvrs.exe
AntiVirus 2008.lic

Antivirus 2008 is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Antivirus 2008 can help you to remove it after you download the trial version. As soon as the victim downloads Antivirus 2008 trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Antivirus 2008 offers to buy the full version to fix these false errors. If the user agrees, Antivirus 2008 not only does not fix the errors, but it takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Antivirus 2008, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Antivirus 2008, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Antivirus 2008, is nearly impossible to remove manually.

1 comment:

eleven09 said...

i think there is a mistake about file shlwapi.dll and
wininet.dll. if you remove those files your wont starting.

i have try to remove antivirus 2008.
1. Delete all antivirus 2008
2. search on registry and find antivirus 2008 and then delete it

after that your windows will start normali