How to remove fake Antivirus (avt.exe)
Antivirus (avt.exe) is a new fake antivirus tool (clone of Defense Center, Protection Center, Data Protection, Digital Protection, Your Protection, Dr. Guard and User Protection) that promoted and installed itself through the use of fake alert trojans that advertise the program on desktop.
Once started, avt.exe scans your computer for an already installed well-known antispyware and antivirus programs (AVG, Avira, McAfree, F-secure, Nod32, Loaris and etc), and if they are found, will attempt to uninstall them under the pretext that they may conflict with it by showing the following alert:
Antivirus
Uncertified {antivirus name} antivirus software detected on your computer. You need to remove
{antivirus name} software for correct operation of the Antivirus.
Attention: If you don`t remove {antivirus name} software, the performance of your computer will
dramatically degrade.
Press “OK” to remove the {antivirus name}
The program start to scan computer for infections and once the scan is finished it will state that there are tens infections on computer, but will not allow you to remove them until you purchase the program. In reality, this infections are fake and do not actually exist on computer.
Do not install and purchase Antivirus (avt.exe)! You can get rid of DefenseCenter using Trojan Remover.
Antivirus (avt.exe) automatical remover:
- Download the last version of Loaris Trojan Remover to clear (not infected) computer and install it
- Update the virus database
- Copy whole folder “c:\Program Files\Loaris\Trojan Remover\” to your memory stick
- Rename “ltr.exe” to “iexplore.exe”
- Move memory stick to infected PC and run iexplore.exe from “Trojan Remover” folder
The screenshot above displaying all the threats that Loaris Trojan Remover found. Please note that the infections found on computer may be different than what is shown here.
As you might have foreseen, Antivirus (avt.exe) is not a lonely walker in the empty space. In contrary, it has multiple ties with other rogues so that complex malware removal is the best way to get rid of Antivirus (avt.exe). In addition, if you remove Antivirus (avt.exe) automatically, you get life-time protection from malware aggression.
Antivirus (avt.exe) manual removal guide:
Delete Antivirus (avt.exe) files:
%documents and settings%\all users\application data\fiosejgfse.dll%temp%\mswinsck.exe
%temp%\wscsvc32.exe
%appdata%\microsoft\internet explorer\quick launch\Antivirus.lnk
%desktop%\Antivirus support.lnk
%desktop%\Antivirus.lnk
%commonprograms%\AnVi\about.lnk
%commonprograms%\AnVi\activate.lnk
%commonprograms%\AnVi\buy.lnk
%commonprograms%\AnVi\Antivirus support.lnk
%commonprograms%\AnVi\Antivirus.lnk
%commonprograms%\AnVi\scan.lnk
%commonprograms%\AnVi\settings.lnk
%commonprograms%\AnVi\update.lnk
%programfiles\AnVi\about.ico
%programfiles\AnVi\activate.ico
%programfiles\AnVi\buy.ico
%programfiles\AnVi\avt.db
%programfiles\AnVi\avtext.dll
%programfiles\AnVi\avthook.dll
%programfiles\AnVi\avt.exe
%programfiles\AnVi\help.ico
%programfiles\AnVi\scan.ico
%programfiles\AnVi\settings.ico
%programfiles\AnVi\splash.mp3
%programfiles\AnVi\uninstall.exe
%programfiles\AnVi\update.ico
%programfiles\AnVi\virus.mp3
Delete Antivirus (avt.exe) registry entries:
hkcr\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}hkcu\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus”
hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “{5E2121EE-0300-11D4-8D3B-444553540000}”
You may also like to read
Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.
[...] What’s Antivirus? [...]