How to remove AntiVirGear ?

September 14th, 2007
AddThis Social Bookmark Button AddThis Feed Button

What is AntiVirGear?

AntiVirGear is a rogue anti-spyware parasite that has reached the Internet on September 13, 2007. Multiple infections followed, as AntiVirGear spreads through browser security holes and/or uses trojans to infiltrate unsuspecting systems.

Once inside, AntiVirGear starts to generate multiple fake security notifications, which, after the user clicks on them, start the "trial" AntiVirGear version that runs a system scan. This scan is completely counterfeit, as its reports display numerous false and exaggerated errors. This is done with the intention to scare the user to the point when he/she is ready to purchase the "full" AntiVirGear version, which is as useless as the trial one.

AntiVirGear is hosted on www[dot]antivirgear[dot]com, which was created on the 14th August 2007. That is exactly a month prior to the infections, which clearly shows the intent of its creators. Be sure to block their website with your HOSTS file to avoid accidental infection.

AntiVirGear is Extremely dangerous

arrow AntiVirGear is a corrupt Anti-Spyware program
arrow AntiVirGear may spread via Trojans
arrow AntiVirGear may display fake security messages
arrow AntiVirGear may install additional spyware to your computer
arrow AntiVirGear may repair its files, spread or update by itself
arrow AntiVirGear violates your privacy and compromises your security

Manual AntiVirGear removal


Important Note: Although it is possible to manually remove AntiVirGear, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.

Remove these AntiVirGear processes:
Remove these AntiVirGear DLL files:
Remove these AntiVirGear Registry files:
Remove these AntiVirGear files:

AntiVirGear is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only AntiVirGear can help you to remove it after you download the trial version. As soon as the victim downloads AntiVirGear trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, AntiVirGear offers to buy the full version to fix these false errors. If the user agrees, AntiVirGear not only does not fix the errors, but it takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as AntiVirGear, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install AntiVirGear, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as AntiVirGear, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as AntiVirGear?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Comment on AntiVirGear