Question:
how do i remove anti virus Pro out off my computer?
Yabuka
2009-11-11 18:19:01 UTC
how do i remove anti virus Pro out off my computer?
Ten answers:
Uncle Santa
2009-11-11 18:40:21 UTC
Antivirus Pro 2010 Removal Instructions for XP

1.Hit Ctrl Shift and Esc at the same time and bring up your task manager and choose the processes tab and look for AntivirusPro_2010.exe yxine.exe Uninstall.exe mifiryvele.exe? Rt click on them and choose end process.If it won't let you end the process.Download this free malware killer called Pocket Killbox and read the instructions and use it to kill malicious processes and hunt down infected files and delete them for good.

Download: http://www.killbox.net/downloads/KillBox.exe

Instructions: http://www.killbox.net/help.html

Check processes at these sites.

http://searchtasks.answersthatwork.com/index.html

http://www.processlibrary.com/



2.Go to Start -> Run ->type msconfig and hit Ok. Go in BOOT.INI tab and tick both "Safe boot" and to the right of that "Networking" and hit Apply and Close.(It will boot in "Safe with networking mode" Choose Administrator)



3.While in "Safe with networking mode" download Malwarebytes.

(Free) http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol

(Note)If you already have Malwarebytes installed and it won't run go in it's program file and rt click on the red mbam app and rename it mbam.bat then rt click and choose send to-> Desktop (create shortcut) now close out of everything and go to your desk top and use that app to launch M-Bam for now on.



4.Right click on the mbam setup app you downloaded and rename it xxxx then Dbl click on it and install and update it and run a full scan and delete/quarantine all entities it finds and restart if it asks? (Note) If it won't update use this link to download and install the latest rules: http://www.malwarebytes.org/mbam/database/mbam-rules.exe



5.Go to Start,Run,type msconfig and hit ok.Go in BOOT.INI tab and untick Safe Boot and then go in the Startup tab and (uncheck) all programs (not) needed at startup (Only check programs you want running all the time like antivirus,IM,etc)"Lesser is better in this case" and hit apply,close,restart.

Your computer will boot normally and on your desktop a window will popup,check "Don't show this message" box and hit ok.



(Note)Check here for info's on startup programs http://www.techspot.com/startup/

(How to video) http://www.youtube.com/watch?v=rbSwtNiBx5A&feature=channel_page



6.Download BitDefender free antivirus and install,update,and depending on time run either a "Deep System" scan which takes hours and cleans everything or a "Full System" scan that takes minutes and will shut down most malware till you can run a deep scan?

When the scan is done delete/quarantine all entities it finds and your done.

(Free) http://www.bitdefender.com/PRODUCT-14-en--BitDefender-Free-Edition.html
Ethan
2016-08-26 17:17:28 UTC
2
vlj2002
2009-11-11 20:35:25 UTC
Use combofix from bleepingcomputer.com, then go download malwarebytes from softpedia.com or cnet.com and use it(rename the installer if it doesn't let



you install it such as winlogon.exe), then clean the rest of the virus with superantispyware and Hitman Pro 3.5 from softpedia.com/cnet.com



Future Protection use this wizard to recommend security protection for your system:



http://www.techsupportalert.com/secwiz



Or Manually:



Terminating the process:



1.I verify that a Rogue is present. This isn't hard, since it's usually popping up just about every few seconds.

2.Click CTRL-ALT-DELETE (if it's available)

3.Click Task Manager

4.Click Processes

5.Find a process that usually contain all numbers. For example 2342342.exe. If you do not see all numbers then your rogue has a name



like...SystemSecurityPro.exe or GreenAV.exe...etc.

6.Select that process and click end process.

7.At this point the rogue process has been terminated.

Removing Rogue Anti-virus that is named with random numbers.



1.Click Start

2.Click Run (or for Vista type in the start search box)

3.For windows xp type: C:\documents and settings\all users\Application Data and click OK. A window will open containing a folder with about 8 numbers.



Your Rogue is in there. Delete that folder.

4.For Windows Vista type C:\users\all users in the "start search" box and click enter. Your randomly named folder with about 8 digits should be in



there. Delete it.

Removing Rogue Anti-Virus that has a name like System Guard Pro, AV2010, etc



1.Open Windows Explorer.

2.Open your C:\ drive.

3.Open Program Files

4.Find the Rogue and Delete the folder.



If not seek an expert. Good Luck!
ilknur K
2009-11-11 18:23:43 UTC
Restart You computer Safe Mode with Networking:



1. Log out and reboot your machine.

2. When the machine starts the reboot sequence, press the F8 key repeatedly.

3. Select Safe Mode with Networking from the resulting menu.

4. Login. If the malware has changed your password, try logging in as Administrator. By default, Administrator has no password.

5. The machine will continue booting, but the Windows desktop will look different.

Then in The Safe With Networking .Download and Scan By Using Malwarebytes’ Anti-Malware http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10997763

Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/



Download and Scan By using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5450&file=1&evp=6980e63d4e482f0670e991265b3250e7



Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.



The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.



ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://majorgeeks.com/ATF_Cleaner_d4949.html



6. When you're finished Remove Virus, Malware, Trojan, Worm, rogue virus and Spyware log out and reboot back into normal mode
?
2009-11-11 18:54:39 UTC
Scan your system using a spyware remover, such as Spyware Doctor or Malwarebytes. Do it in safe mode just to be sure. If you can't seem to take care of the problem that way, try removing Antivirus PRO manually according to these instructions:



http://www.2-viruses.com/remove-antivirus-pro-2010
?
2009-11-12 07:47:21 UTC
Your computer is infected with rogue anti-spyware

Try to use some free antivirus and antispyware products

http://free.avg.com/

SPYBot Search & Destroy

http://www.safer-networking.org/en/download/index.html

MalwareBytes Anti-Malware

http://www.malwarebytes.org/mbam.php

Kaspersky Free removers

http://www.kaspersky.com/removaltools

You can also try to remove it manually. Use manual removal instructions

http://expetecsoc.com/latest-spyware-threats/antivirus-system-pro-removal-guide.html

OR

http://www.bleepingcomputer.com/virus-removal/

Use manual removal guide only in SAFE MODE.
anonymous
2009-11-12 04:59:08 UTC
This particular malware should be removed as soon as it has been detected.



As with many rogue applications, Antivirus System Pro is designed to coerce money from unsuspecting computer users, and should therefore NOT be trusted!



Instead, I suggest you check out the link below – here you will find information on how to rid your system of this dubious security tool.



http://www.pcthreat.com/parasitebyid-8011en.html
anonymous
2009-11-11 19:24:56 UTC
Internet Antivirus Pro is the latest fake (rogue) anti-spyware software. Internet Antivirus Pro can be installed manually from bogus web-resources or through browser security holes. This application may be extremely dangerous for your privacy. It wil generatefake security warnings and alerts,, hijack browser homepage, download and install other spyware programs, disable firewalls and antivirus programs. It's difficult to remove Internet Antivirus Pro, it can repair and recreate itself. Fake security warnings and spyware detection popups was designed to goad you into buying full commercial version of Internet Antivirus Pro.

-----------------

try manual removal guide

http://malware-virus-spyware-remover-tools.blogspot.com/
anonymous
2009-11-11 18:35:35 UTC
Antivirus Pro can be removed manually or automatically.

For removal instructions, take a look here: http://www.spyware-review.net/how-to-uninstall-antivirus-system-pro/
anonymous
2009-11-12 11:35:48 UTC
Step 1Temporarily remove the pop-up advertisements and end bad processes:

* Push Ctrl + Alt + Delete at the same time

* Choose "Task Manager" in the Windows Security menu

* Click on the "Processes" Tab

* Search for the following processes: Antivirussystempro.exe, uninstall.exe (if constantly running), and sysguard.exe

* Disable these processes by clicking the "end process" button



Step 2Conduct a search on your computer for Antivirus System PRO files:

* Go to the start menu and click the search button

* Make sure you search "All files and folders" in the "Local Hard Drive" or C Drive

* Type "Antivirus System PRO" in the search box and search for all of these files including:

c:\WINDOWS\system32\iehelper.dll

%ProgramFiles%\Antivirus System PRO\conf.cfg

%ProgramFiles%\Antivirus System PRO\mbase.vdb

%ProgramFiles%\Antivirus System PRO\quarantine.vdb

%ProgramFiles%\Antivirus System PRO\queue.vdb

* If none of these files appear, then you may have to search for each file individually.

* Search and delete the following folder:

%ProgramFiles%\Antivirus System PRO\



Step 3Create a backup file of your entire registry. One way to do this is to generate a system restoration point:

* Click Start, All Programs, Accessories, System Tools, System Restore

* Choose "Create a restore point" and click the Next button

* Type in a name to recognize the restore point and click "Create"



Step 4Remove files from the registry:

* Click Start, Run, and type "regedit" in the available field.

* Hit the Enter key, or click "OK", and the registry editor should appear

* Select Edit, Find, and search for the following:



HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”



HKEY_CURRENT_USER\Software\AvScan



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”



HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}



* If you locate any of these files, right-click the file and select "Modify" and "Delete"



Step 5Remove DLL files for those who have c:\WINDOWS\system32\iehelper.dll in their processes:

* Go to Start, Run, type "cmd", and click "OK"

* Type "cd", enter a SPACE, and type c:\WINDOWS\system32\iehelper.dll

* Once the file is located, type regsvr32 /u iehelper.dll and hit "Enter"

Step 6Search the local hard drive once more for "Antivirus System PRO" and "SYSGUARD" separately to make sure all of these files are deleted.



Step 7Restart the computer. If no pop-ups appear after restarting the computer then the malicious software should not be on your system. Double check to make sure the Antivirus System PRO software has not returned.



Step 8Repair any damages that may have occurred from the malicious software or deletion. Check to see if your desktop icons and homepage have been changed or moved.


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Continue reading on narkive:
Loading...