AntiVirGear is a fake scanning tool usually downloaded to the system on accident, and without a user knowing this program will install itself and produce a number of warnings indicating a system infection. These warnings are fake and should be ignored. The warnings it produces will inform a user of various security flaws and will do scans that tell a user that they are infected with a serious Trojan virus, AntiVirGear will then attempt to remove it and then gives a error messages saying the infection can only be removed with the purchase of their software. This is a scam and should never be purchased. If a user attempts to close out of the program it will continue to run in the background taking up system resources causing slow downs. AntiVirGear will also change internet settings causing browser redirects as well as disables some Windows Utilities.

Manual Removal of AntiVirGear:

First to avoid any further infections caused by internet browsing redirects users will need to go to their Internet Options; this can be done by going to the start menu followed by control panel.Once in Internet Options choose the “Connections” tab followed by “LAN Settings” uncheck the “Use a Proxy Server” Option. Once done click “Ok” to save these settings.

Next users need to disable the process from running, to do this press Ctrl+Shift+Esc to open up the task manager, once opened choose “Processes” and look for .exe, click on the process and then click the “End Process” button. This will disable the program from running and will allow the files to be removed.

All malware and spyware create leaves files on your system, below is a list of files that need to be deleted to remove the infection completely:

• %UserProfile%\Desktop\AntiVirGear [VERSION NUMBER].lnk
• %UserProfile%\Start Menu\AntiVirGear [VERSION NUMBER].lnk Clean
• %UserProfile%\Start Menu\Programs\AntiVirGear [VERSION NUMBER]
• %UserProfile%\Start Menu\Programs\AntiVirGear [VERSION NUMBER]\AntiVirGear [VERSION NUMBER] Website.lnk Clean
• %UserProfile%\Start Menu\Programs\AntiVirGear [VERSION NUMBER]\AntiVirGear [VERSION NUMBER].lnk Clean
• %UserProfile%\Start Menu\Programs\AntiVirGear [VERSION NUMBER]\Uninstall AntiVirGear [VERSION NUMBER].lnk Clean
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVirGear [VERSION NUMBER].lnk
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\AntiVirGear [VERSION NUMBER].exe
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\AntiVirGear [VERSION NUMBER].url
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\avrg.dat
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\blacklist.txt
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\Lang\English.ini
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\msvcp71.dll
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\msvcr71.dll
• %ProgramFiles%\AntiVirGear [VERSION NUMBER]\uninst.exe

AntiVirGear Registry Entries that should be removed:

• HKEY_CLASSES_ROOT\Interface\{418985AE-4FE4-448D-83EE-238C887D8FC2}
• HKEY_CLASSES_ROOT\Interface\{5F251303-F8C4-44C3-A7C2-9E8A93C59322}
• HKEY_CLASSES_ROOT\Interface\{61840430-C7CF-43A0-9D49-3B3ED563FED1}
• HKEY_CLASSES_ROOT\Interface\{64A8E3CA-AE17-4EB0-8C67-47D1103A5B6F}
• HKEY_CLASSES_ROOT\Interface\{765A8F7D-F57B-4601-A038-3F463A4D3193}
• HKEY_CLASSES_ROOT\Interface\{77E616D5-5DB4-4B6A-8BDA-2BE4103A9921}
• HKEY_CLASSES_ROOT\Interface\{8742F319-C916-4930-B781-1C148134C05C}
• HKEY_CLASSES_ROOT\Interface\{897F5CB6-C1C1-494E-8F17-972784193442}
• HKEY_CLASSES_ROOT\Interface\{A2224C72-745E-4046-882F-1A48C9311D77}
• HKEY_CLASSES_ROOT\Interface\{AA500EFC-3C92-44C9-B1D6-7A7033343A50}
• HKEY_CLASSES_ROOT\Interface\{AB5E9971-7086-4E6E-ADFA-BE9C685BE68B}
• HKEY_CLASSES_ROOT\Interface\{AD7CA0BC-693A-4AF9-B31A-60472248F761}
• HKEY_CLASSES_ROOT\Interface\{B2882CC2-0077-426B-916D-E0B9EA23A1B5}
• HKEY_CLASSES_ROOT\Interface\{EE241504-6F15-49E4-847F-B4D7DA9EA8F9}
• HKEY_CLASSES_ROOT\Interface\{F1666E4E-45C8-462A-97FF-BFD5A103BFFA}
• HKEY_CLASSES_ROOT\Interface\{FD9A05E8-4A1E-45E6-B3B6-37CE20140278}
• HKEY_CLASSES_ROOT\TypeLib\{AF0C5CBA-52E1-4B29-A2DC-58D91D599612}
• HKEY_CLASSES_ROOT\Interface\{0A0FC1A4-41D4-4793-9AC5-0B55CDC95AE9}
• HKEY_CLASSES_ROOT\Interface\{14F47CA3-2291-4B3E-9ED4-8C7E6AE80851}
• HKEY_CLASSES_ROOT\Interface\{2447284F-3590-4E8C-A869-049BD87CAD07}
• HKEY_CLASSES_ROOT\Interface\{38EEEF46-CA24-4ACA-A90D-540978DF7252}
• HKEY_CLASSES_ROOT\Interface\{3D5E5AE1-5DED-4520-BDC2-B9292EA708CA}
• HKEY_CLASSES_ROOT\Interface\{409A05EF-1B48-4198-B6BF-993B8B52790C}
• HKEY_CLASSES_ROOT\Interface\{47A93011-1004-440C-9960-BD3B0348A7C2}
• HKEY_CLASSES_ROOT\Interface\{50B388D5-4A80-4191-8BCC-5DD031D7F3EE}
• HKEY_CLASSES_ROOT\Interface\{58A1ACE6-0DBA-45D2-8154-E8253A7B87BB}
• HKEY_CLASSES_ROOT\Interface\{73D25394-992F-43D1-BF92-48494CC0D1AE}
• HKEY_CLASSES_ROOT\Interface\{7D2A83A4-0687-4704-937E-A29045826F77}
• HKEY_CLASSES_ROOT\Interface\{A7FE54B2-B167-4017-BCCC-CF73B2F678E3}
• HKEY_CLASSES_ROOT\Interface\{C183B073-2D7F-45BC-8967-80147CECEE45}
• HKEY_CLASSES_ROOT\Interface\{F6FDBF9A-19A7-4F0A-9F46-6F015A067B44}
• HKEY_CLASSES_ROOT\Interface\{F90A7969-20A0-4257-B39D-9C73D64CE3B0}
• HKEY_CLASSES_ROOT\Interface\{FA38F299-57F8-4FEB-9096-715460AE943C}
• HKEY_CLASSES_ROOT\TypeLib\{DE6AE29A-EB7D-4656-9418-26D5FCC9ADF5}
• HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirGear [Version Number]
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirGear [Version Number].exe [Version Number]
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirGear [Version Number]
• HKEY_LOCAL_MACHINE%\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\

Having Problems removing AntiVirGear? Our Remote Support Technicians can remove spyware for you and cleanup your computer while you watch. Contact us at Support@ExpertSupportNow.com or call us at 586-816-0015 for spyware removal and IT support.

Be Sociable, Share!

•