How can i get rid of anti-virus pro without using the internet?

Question

it installed on my computer without my permisson but i cant open ANY files on my computer. The only thing i can open is my computer and look around in there but i cannot locate the anti-virus pro, i look at its properties and it says its located in my computer:/documents and settings:/local.
But the problem is there is no local folder there so i cant do anything, i cant download any software without it saying all my files are currupt, it will ask me to run anti virus pro to help but it again says my internet files are currupt. PLEASE help me :(

Answer 1

You will have to use the internet to get rid of this malware. The experts at BleepingComputer.com have a removal guide & links to 2 programs to download for removal. If necessary, use a friend's computer & download & install the 2 programs to a flash drive & use it to clean your computer.



http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-pro

scroll down to: Automated Removal Instructions for Windows Antivirus Pro using Malwarebytes' Anti-Malware



...

Answer 2

Use combofix from bleepingcomputer.com, then go download malwarebytes from softpedia.com or cnet.com and use it(rename the installer if it doesn't let you install it such as winlogon.exe), then clean the rest of the virus with superantispyware and Hitman Pro 3.5 from softpedia.com/cnet.com



Future Protection use this wizard to recommend security protection for your system:



http://www.techsupportalert.com/secwiz



Or Manually:



Terminating the process:



1.I verify that a Rogue is present. This isn't hard, since it's usually popping up just about every few seconds.

2.Click CTRL-ALT-DELETE (if it's available)

3.Click Task Manager

4.Click Processes

5.Find a process that usually contain all numbers. For example 2342342.exe. If you do not see all numbers then your rogue has a name like...SystemSecurityPro.exe or GreenAV.exe...etc.

6.Select that process and click end process.

7.At this point the rogue process has been terminated.

Removing Rogue Anti-virus that is named with random numbers.



1.Click Start

2.Click Run (or for Vista type in the start search box)

3.For windows xp type: C:\documents and settings\all users\Application Data and click OK. A window will open containing a folder with about 8 numbers. Your Rogue is in there. Delete that folder.

4.For Windows Vista type C:\users\all users in the "start search" box and click enter. Your randomly named folder with about 8 digits should be in there. Delete it.

Removing Rogue Anti-Virus that has a name like System Guard Pro, AV2010, etc



1.Open Windows Explorer.

2.Open your C:\ drive.

3.Open Program Files

4.Find the Rogue and Delete the folder.



If not seek an expert. Good Luck!

Answer 3

You can run antivirus and antispyware programs, but the sad fact is if you have found one virus on your computer, you probably have several. Cleaning the computer now requires you to follow these steps, because modern viruses and spyware entrench themselves in files that your computer needs in order to run:



1. Virus-check your data files (not application files-- you have installer CDs for those).

2. Back up the data files, getting them off your hard drive.

3. Get your original operating system CDs that came with your computer.

4. Boot your computer from the operating system CD.

5. Select the option that erases your hard drive and then reinstall your system software.

6. Turn on your software firewall that came with your operating system.

7. Reconnect to the internet, and download *all* Windows updates, no matter how long it takes.

8. Reinstall your application software, and update the applications as much as you can.

9. Reinstall your data files.

10. Create a limited user account on your system that does *not* have administrator access, and web surf only from this account.



Yes, this is a pain in the butt. No, there is no other way. No, antivirus and antispyware programs cannot fix this problem on its own.



So, what do you do in the future?



1. Never click on links you find in an e-mail.

2. Never open an e-mail attachment, ever.

3. Only download files from a reputable website that you know is on the up-and-up.

4. Never use bit-torrent and other file-sharing programs.

5. Never use an unsolicited drive-checking site.

6. Turn off all java and java scripting by default, and only enable java and java scripting for sites that you know you can trust.

7. Never read an unsolicited e-mail, and delete spam immediately. It is possible to be hacked by reading an e-mail alone.



Please adhere to the 'dont's' I provided above, because you will have to repeat the cleaning steps that I listed first *every time you get infected.* Anti-spyware and anti-virus programs are good to have, but they are a second line of defense. The best way to protect your system is you, and changing your behavior.



Good luck!

Answer 4

Look here for information:

http://www.pchell.com/support/spywaretools.shtml



Antivirus System Pro Removal by Microsoft:

http://social.answers.microsoft.com/Forums/en-US/vistasecurity/thread/958c7e56-9d60-4f8c-90e5-be20e3f79c87



Antivirus System Pro (Uninstall Guide)

http://www.bleepingcomputer.com/virus-removal/remove-antivirus-system-pro

`

Answer 5

The Best way to Remove all kind of Virus,Trojans,Malware,Spyware,

Worm,Pop Up Advertisements ,Hijack Web browser rootkit and all Rogue Fake

Anti-virus in you Computer is Restart You Computer Safe Mode with Networking



1. Log out and reboot your machine.



2. When the machine starts the reboot sequence, press the F8 key repeatedly.



3. Select Safe Mode with Networking from the resulting menu.



4. Login. If the malware has changed your password, try logging in as

Administrator. By default, Administrator has no password.



5. The machine will continue booting, but the Windows desktop will look different.



Then in The Safe With Networking .Download and Scan By Using Malwarebytes’ Anti-Malware http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10997763

Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/



Download and Scan By using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5450&file=1&evp=6980e63d4e482f0670e991265b3250e7



Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.



The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.



ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://majorgeeks.com/ATF_Cleaner_d4949.html



6. When you're finished Remove Virus, Malware, Trojan, Worm,

rogue

virus rootkit and

Spyware log out and reboot back into normal mode

Answer 6

Well brother you can easily remove the antivirus system pro without using Internet by just manually removing it...........

For this you just need to follow the steps below:



Step 1

Remove the pop-up advertisements temporarily and end bad processes:

Push Ctrl + Alt + Delete at the same time

Choose "Task Manager" in the Windows Security menu

Click on the "Processes" Tab

Search for the following processes: Antivirussystempro.exe, uninstall.exe (if constantly running), and sysguard.exe

Disable these processes by clicking the "end process" button



Step 2

Conduct a search on your computer for Antivirus System PRO files:

Go to the start menu and click the search button

Make sure you search "All files and folders" in the "Local Hard Drive" or C Drive

Type "Antivirus System PRO" in the search box and search for all of these files including:

c:\WINDOWS\system32\iehelper.dll

%ProgramFiles%\Antivirus System PRO\conf.cfg

%ProgramFiles%\Antivirus System PRO\mbase.vdb

%ProgramFiles%\Antivirus System PRO\quarantine.vdb

%ProgramFiles%\Antivirus System PRO\queue.vdb

If none of these files appear, then you may have to search for each file individually.

Search and delete the following folder:

%ProgramFiles%\Antivirus System PRO\



Step 3

Create a backup file of your entire registry. One way to do this is to generate a system restoration point:

Click Start, All Programs, Accessories, System Tools, System Restore

Choose "Create a restore point" and click the Next button

Type in a name to recognize the restore point and click "Create"



Step 4

Remove files from the registry:

Click Start, Run, and type "regedit" in the available field.

Hit the Enter key, or click "OK", and the registry editor should appear

Select Edit, Find, and search for the following:



HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”



HKEY_CURRENT_USER\Software\AvScan



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”



HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}

If you locate any of these files, right-click the file and select "Modify" and "Delete"



Step 5

Remove DLL files for those who have c:\WINDOWS\system32\iehelper.dll in their processes:

Go to Start, Run, type "cmd", and click "OK"

Type "cd", enter a SPACE, and type c:\WINDOWS\system32\iehelper.dll

Once the file is located, type regsvr32 /u iehelper.dll and hit "Enter"



Step 6

Search the local hard drive once more for "Antivirus System PRO" and "SYSGUARD" separately to make sure all of these files are deleted.



Step 7

Restart the computer. If no pop-ups appear after restarting the computer then the malicious software should not be on your system. Double check to make sure the Antivirus System PRO software has not returned.



Step 8

Repair any damages that may have occurred from the malicious software or deletion. Check to see if your desktop icons and homepage have been changed or moved.

Answer 7

This particular malware should be removed as soon as it has been detected.



As with many rogue applications, Antivirus Pro 2010 is designed to coerce money from unsuspecting computer users, and should therefore NOT be trusted!



Instead, I suggest you check out the link below – here you will find information on how to rid your system of this dubious security tool.



http://www.pcthreat.com/parasitebyid-8239en.html

Answer 8

boot and at the same time tap the F8 key when the options screen appears choose safemode with networking then go to Safety.Live.com that is Microsoft's online virus scanner use the full service scan...you can find manual removal instructions at precisesecurity.com or bleepingcomputer.com

Answer 9

Kill processes:

iv.exe InternetAntivirus.exe IAUpdater.exe IAvir.exe unins000.exe

HELP:

how to kill malicious processes



Delete registry values:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "iv"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Antivirus"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC_IA"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Antivirus_is1

HELP:

how to remove registry entries



Delete files:

InternetAntivirus.exe activate.ico cookies.log Explorer.ico IAUpdater.exe IAvir.exe Scanner.log unins000.dat uninstall.ico working.log config.cfg DBInfo.ver ia080614.db Internet Antivirus.lnk Internet Antivirus Home Page.lnk Internet Antivirus.lnk Purchase License.lnk settings.ini uill.ini unins000.exe Uninstall Internet Antivirus.lnk iv.exe

HELP:

how to remove harmful files



Delete directories:

c:\Program Files\IA

c:\Program Files\Internet Antivirus

c:\Program Files\Internet Antivirus\db

c:\Program Files\Internet Antivirus\Languages

c:\Documents and Settings\All Users\Start Menu\Programs\Internet Antivirus

%UserProfile%\Application Data\Internet Antivirus

Answer 10

Yea, what Loadnabox said.



Also you can click

Start

Run



and type



msconfig



then hit enter. Click the Startup tab and uncheck anything you don't need. that will speed up your computer to. Click ok then restart.

Answer 11

check if this free tool can help you remove the anti-virus pro malware : http://www.thestubware.com/malware_removal/antiviruspro_2010/

Answer 12

Go buy one from the store.

Answer 13

good luck with that one. I had to wipe and reload my operating system.

Answer 14

try add remove programs in control panel