Friday, November 18, 2011

Remove AV Protection 2011 virus

AV Protection 2011 is another rogue antivirus program from the same family of malware as AV Security 2012, Cloud Protection, Guard Online, AV Guard Online, OpenCloud Security,etc. It pretends to be a legitimate virus and malware remover tool but, in reality, it can not remove viruses, trojans, etc., nor will be protect your computer from legitimate future infections. The rogue is created with one purpose to trick you into purchasing the full version of the software. So, don`t trust anything relate to this software and remove AV Protection 2011 as soon as possible.





What AV Protection 2011 does

The program is promoted and installed with the help of trojans that are mostly distributed via fake online scanners, misleading websites and using social engineering. When the trojan is started, it will download and install the rogue onto your computer. On first run, AV Protection 2011 configures itself to start automatically when Windows loads. Next, it will perform a fake system scan and detect a lot of infections that can only be removed with a full version of the program. Obviously, such results are a fraud, the program want to scare you into thinking that your computer is infected with malicious software. So, you can safety ignore the scan results.




Obviously, such results are a fraud, the program want to scare you into thinking that your computer is infected with malicious software. So, you can safety ignore the scan results.

While AV Protection 2011 is running, it will flood your computer with fake security alert and notifications from Windows task bar that stats:

svchost.exe svchost.exe was replaced with unauthorized program. svchost.exe has encountered a problem and needs to
close. We are sorry for inconvenience.
To help protect your computer, Windows Firewall has blocked some features of this program. Do you want to keep blocking this program? Name: Zeus Trojan

Warning!
Running of application is impossible.
The file C:\Windows\System32\notepad.exe is infected.
Please activate your antivirus program.

As you can see, AV Protection 2011 is absolutely useless and what is more, even dangerous software. Most importantly, do not purchase it. Instead, please use the steps below in order to remove this malware from your computer for free.

How to remove AV Protection 2011

1. Reboot your computer in Safe mode with networking by doing the following:
- reboot your computer;
- after hearing your computer beep once during startup, but before the Windows icon appears, keep tapping F8;
- instead of Windows loading as normal, Windows Advanced Options menu should appear;
- select second option Safe mode with networking and then press ENTER.

3. AV Protection 2011 may be installed with ZeroAccess trojan-rootkit, so you should run ZeroAccess remover to detect and remove this infection. Download ZeroAccess trojan removal tool from the link below

anywhere.webrootcloudav.com/antizeroaccess.exe

Run it and follow the prompts.

4. AV Protection 2011 may be installed with TDSS trojan-rootkit, so you should run TDSS remover to detect and remove this infection. Download TDSS trojan removal tool from the link below


support.kaspersky.com/downloads/utils/tdsskiller.zip

Uunzip it to your desktop. Run TDSSKiller and follow the prompts.

5. Download Malwarebytes Anti-malware from the link below

myantispyware.com/mbam

6. Double click mbam-setup.exe to install the application. When installation is complete, make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version.

7. Once the program has loaded you will see a screen like below.

Malwarebytes' Anti-Malware

8. Select "Perform Quick Scan", then click Scan. When the scan is done, click OK, then Show Results to view the results. You will see a list of malware that  Malwarebytes' Anti-Malware found on your computer. Note: list of malware may be different than what is shown in the screen below.

Malwarebytes' Anti-Malware - lists of malicious software

9. Make sure that everything is checked, and click Remove Selected. Once disinfection is finished, a log will open in Notepad and you may be prompted to Restart.

If the instructions does not help you, then ask for help in the Spyware removal forum.

No comments:

Post a Comment