Home > Rogue Anti-Spyware > Antivir

How to remove Antivir?

November 27th, 2009

What is Antivir?

Antivir is a rogue anti-spyware program which is mostly installed to the system manually. Fake online scanners promote Antivir by offering for PC users to download the scam which is promised to clean every machine. Tactics goes when pop-up ads, stating about various cyber infections detected, interrupt browsing the Internet and bring people to the “official” website from where Antivir can be downloaded. However, after being installed Antivir loads tons of annoying reports trying to make its victims concerned about their PCs security. Because of being created only to swindle the money, this rogue offers purchasing its licensed version for fixing non existent security issues. The only infection that must be eliminated is the same Antivir and only its removal can help you to save computer’s OS.

Antivir starts automatically when machine boots up. Once started, badware lists numerous infections by using misleading notifications. What is more, Antivir hijacks Internet Explorer and victims start getting warnings about the potential harm when browsing the Internet. Antivir expects to make users scared by loading messages like these two:

Trojan:W32/Inject Activity Detected
Trojan:W32/Inject is a large family of malware that secretly makes changes to the Windows Registry . Variants in the family make also makes changes to other running processes.
Warning! Identity theft attempt detected

Warning! Visiting this site may harm your computer!
This web site probably contains malicious software program, which can cause damage to your computer or perform actions without your permission. Your computer may be infected after visiting such web site.

The only truth is that Antivir is a rogue anti-spyware program which seeks only to make people purchase its “full” version. Instead of purchasing this program, delete every file connected to Antivir. If you have already bought this scam, reach your credit card company to dispute the charges.


Antivir is Extremely dangerous

arrow Antivir is a corrupt Anti-Spyware program
arrow Antivir may spread via Trojans
arrow Antivir may display fake security messages
arrow Antivir may install additional spyware to your computer
arrow Antivir may repair its files, spread or update by itself
arrow Antivir violates your privacy and compromises your security

Antivir screenshots


Manual Antivir removal


Important Note: Although it is possible to manually remove Antivir, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.

Stop these Antivir processes:
Disable these Antivir DLL files::
Remove these Antivir Registry Entries:
Remove these Antivir files:

Antivir is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Antivir can help you to remove it after you download the trial version. As soon as the victim downloads Antivir trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Antivir offers to buy the full version to fix these false errors. If the user agrees, Antivir does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Antivir, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Antivir, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Antivir, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as Antivir?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. Christopher Hodge
    December 3rd, 2009 at 07:53 | #1

    there are multiple x pop ups stating backdoor.win32.clampi.a activity detected
    and other various w32.gosys antivir resident shield pop ups stating that there are possible viruses on my computer and that I need to buy certain virus protectors for like $49.99. Is this a scam or the real thing, because I feel like someone is trying to retrieve personal information from me. Thank you and please get back with me as soon as you can

  2. Elaine M Dobler
    December 17th, 2009 at 18:23 | #2

    I need to remove this and I dont know how help me it is blocking my computer and I need to use it everyday for my job

  3. Manuel
    January 3rd, 2010 at 19:51 | #3

    To remove Antivir from your computer, please, do the following steps:1. Open Antivir window (you can do it by left clicking the tray icon on the taskbar in the right bottom corner of your screen near the clock)2. Go to the “Settings” tab.3. Uncheck the check-box “Protect Antivirus core (recommended)”.4.Click “Save Settings” button5.Make sure that the settings have been saved: window “Setting Saved” appears.6.Right click the tray icon (near the clock) and select Uninstall.

  4. Leon
    January 4th, 2010 at 18:54 | #4

    I try to remove antivir in the control panel add or remove programs but it does not appear as an installed program, if i do these steps will it get rid of the antivir completely?

  5. Marry
    January 10th, 2010 at 04:06 | #5

    I downloaded Spyware Doctor, it blocks Antivir first, then scans your comp and removes it (Takes long time) I recmmend it. Antivir is still on my comp but its now blocked so I dont have to worry about it bombarding my computer and spamming like crazy.

  6. January 11th, 2010 at 10:23 | #6

    Marry: Do a full scan with Spyware Doctor. If you get reinfected, it means you did partial scan only or you are attacked from other PC in the network/infected websites.

  7. Edwardo
    January 17th, 2010 at 18:06 | #7

    My computer got infected with antivir just yesterday. Computer is already screwing up alot and it is hard to funciton. Where can i find the applications listed above on my computer or is there a better/easier way to delete it? I’m scared to used the automatic spyware removal because I don’t want more viruses. Help is much appreciated

  8. January 18th, 2010 at 09:44 | #8

    Edwardo. Well, Spyware Doctor won PCMag editor’s choice couple times. So it is quite good. With antivir the problem is that its infection is in several different places and it is hard to list exact place where to find them. Good way of action would be starting process manager and looking at each of processes. Then google each process name – if it is not reported as system process, required for system to function, stop it.

  9. lindsay
    January 18th, 2010 at 19:31 | #9

    i really need help! AntiVir blocks every site I go to and google won’t even work ;_; I just downloaded the Spyware Doctor and it told me I have 137 threats, but the AntiVir stuff is all still here. Did I do something wrong? Was I supposed to do something else? I thought the Spyware Doctor was used to get rid of AntiVir

  10. January 19th, 2010 at 09:36 | #10

    Do a full scan with spyware doctor and remove all threats it finds. Some Antivir promoting processes might be listed as trojans.

  11. matt
    January 23rd, 2010 at 04:51 | #11

    I ran spyware doctor free version and when its done and i go to remove everything it found it says i have to buy the online version and have to register it to remove everything.. is this true?

  12. January 23rd, 2010 at 12:26 | #12

    Yes, spyware doctor is commercial product, It provides free scanner though which lists all infections. You can choose between removing them manually, or by full version of spyware doctor.

  13. jennifer kirkham
    January 24th, 2010 at 21:06 | #13

    thank you manuel so much for telling the world how to remove this annoying program my mom added this to my daughters labtop trying to help unaware of what would happen and going by your instructions it worked thank you thank you thank you

  14. Mary
    January 25th, 2010 at 23:03 | #14

    @jennifer kirkham

    @Manuel

    I went to settings but couldn’t find where to uncheck the box “protect antivirus core”

  15. Cory
    February 4th, 2010 at 20:12 | #15

    @Manuel
    Thank you it worked for me

  16. Star
    February 4th, 2010 at 21:59 | #16

    i cannot find the box to check. please help! i need this for school but am not too saavy with it! :(

  17. james
    February 8th, 2010 at 10:56 | #17

    I followed you instructions on how to remove the untivir in my computer and it did work! Thank you very much, Manuel….god bless you…

  1. No trackbacks yet.