How to remove Antivirus Plus?
What is Antivirus Plus?
Antivirus Plus is another rogue pretending being Microsoft’s recommended anti-malware tool. The trojan tries to mask the website in the hosts files, pretending it is legitimate microsoft website. A clear sign of AntiVirus Plus+ is entry like this in the HOSTS file : 66.249.93.104 security.microsoft.com This entry should be removed once noticed. These fake Antivirus Plus alerts are provided by trojan installers coming through peer-2-peer networks, infected websites and bundled shareware products like Video codecs. Once free version of the AntiVirusPlus is installed and run, you will be informed about various spywares and trojans in your PC that no real security expert ever seen. They are all fakes! After scanning they ask to pay for “full” version of the software which “can remove” the parasites. After paying to them, you will never hear about them again and wont get any software. At least no useful one. Sometimes they just use credit card details couple more times to make a bigger hole in your pockets in these difficult times. You should not believe owners of this scumware and remove AntiVirus Plus from your PC as fast as possible instead. The reason for this is that such software might create backdoors for real parasites, that might use your PC to send spam, show other popups or try to get credit card infos and send them to criminals. Block antivirus-plus.org using your HOSTS file.
Antivirus Plus is Extremely dangerous
Antivirus Plus is a corrupt Anti-Spyware program Antivirus Plus may spread via Trojans Antivirus Plus may display fake security messages Antivirus Plus may install additional spyware to your computer Antivirus Plus may repair its files, spread or update by itself Antivirus Plus violates your privacy and compromises your security
detection Note: Spyware doctor trial provides detection of parasite like Antivirus Plus detection and limited protection for free. You can remove detected files, processes and registry entries yourself or purchase a full version. Learn why we have choosen spyware doctor.
Antivirus Plus screenshots
Manual Antivirus Plus removal
Important Note: Although it is possible to manually remove Antivirus Plus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com. Stop these Antivirus Plus processes:
Remove these Antivirus Plus Registry Entries:
Remove these Antivirus Plus files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Antivirus Plus infected files and get help in Antivirus Plus removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing Antivirus Plus and similar threats.
Antivirus Plus is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Antivirus Plus can help you to remove it after you download the trial version. As soon as the victim downloads Antivirus Plus trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Antivirus Plus offers to buy the full version to fix these false errors. If the user agrees, Antivirus Plus does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.
Some Rogue Anti-Spyware, such as Antivirus Plus, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Antivirus Plus, which is another way for Rogue Anti-Spyware to spread itself.
Most of rogue Anti-Spyware, such as Antivirus Plus, is nearly impossible to remove manually.
Thanks for this information. I have started a volunteer Tech support to help people and I was able to use this information to remove the malware. Thanks again
Shay
My roommate is having a hell of a time with her computer, and I am the one who gets to fix it. I love your site. It has made things so much easier for me. Keep on rockin’
Ok thank you for this antivirus-plus kept on poppoing up as i was playing video games and made me lose a tun of stuff i needed got really anoyying thanks again.
Great topic, my boss has this virus, strangely i’ve manually removed these files and more (before i have read your topic) and still the popup comes up.
I’m going to reinstall it anyway because the pc was slow anyway
Greatings
Hello,
It appeares that my Laptop is infected with the Antivirus Plus scum ware. It keeps popping up and wont let me logon to the web. It looks like my IP address is changed. What can I do to remove it. I cant even log on to the web to download mailware remover. Please help.
I have a problem with the rundll32 inside the folder system, the access to delete it is denied… how can I don if I can not exit from the program antivirusplus
Stupid me, believed this and spent $99.00 to get this. Can I get my money back?
Thank you so much…
Deleting rundll32 from the system folder stopped it. It also got removed form the system try. Hope fully its gone for Good.
is the antivirus plus made by “pareto logic”??
No, Magnus.
Paretologic is makers of xsofspy.
@admin hi do you know who the company is for
antivirus plus
They do not post real companies, marty.
i cant delete rundll.exe it reapears!!!
helpp
i mean rundll32.exe
I downloaded the spyware doctor and it says it removed all the infections. So I restarted my computer and the Antivirus Plus still keeps coming up. What do I do?
Hayley : Update spyware doctor and do a FULL system scan.
i have 2 rundll32.exe in my process, which is the negative one? and if i download the remover can it be removed after its used to remove anti virus plus?
p.s. i am using clam as my virus protection, will it find it and help me to remove it? instead if downloading yet another program?
Check which is run under your and which is run under system. The one under your username should be false. Also, viruses change the file/process names sometimes.
Speaking about clam, i am not a big fan of it. If your version is fully updated, then it can not remove the trojans and the rogue.
I am unable to delete the rundll32.exe it says I don’t gave permission. I bought mcafee antivirus plus but it does identify the program. What should I do I’m about to start finals.
@Citlalic
Sry about the typo it mc affe does not recognize anti virus plus as a problem
Rundll32.exe might be both legitimate program and trojan pretending to be a legitimate program. You need to take care while deleting this one.
my daughter has antivirus plus – cant remove it, has mcafee but cant find it. cant seem to install and use windows defender either.
tried everything on google – can not access run, task manager, even notepad to copy vbs script option. cant get restore to work, cant get into registry.
is there anything else we can try – still trying to find restore disk.
windows xp
is this a web a fake as well?
J : Define what is fake website
We give free removal instructions that work for many. Also, we recommend using good products, and not a single product like fake ones.
shar: Try launching task manager RIGHT after login (do not wait till all program loads). Also, do you have access in safe mode ?
hi i have this on my pc but i cant seem to remove it could i please have a simple run on what to do i know its sounds stupid but i would like to get rid of it before it completly screws me over
First go to ur taskmanager and go to processes then end the antivirusplus.exe if its there and the rundll32 if u got 2 rund then just end both. Then go to ur register (windows key + r and type in regedit) and delete the stuff it says here on the site (click on run instead that + mark) then go to C:documents and settings/user/application data and uhm not sure anymore but it should be a antivirusplus map and icon. after that go to c:\WINDOWS\system\rundll32.exe and delete it aswell. Also it might be useful to double check and if it isnt in system map then its in system32 think it depends on the version of ur windows also u need to check internet wich stuff is implented (dunno english word for it) its at extra it ends with manage … theres also an antivirusplus file that need to be disabled also disable all things thats not related to microsoft this should be all. once i did this it got fixed and if rundll keeps coming back u need to get in safe mode
hi
i ran AVG and spybot when i was infected. I “healed” all the infected files. Now i have a issue where i cannot reboot my pc. When i restart it boots up but logs out as soon as i boot up.
HELP!
Thanks
S
I tried your steps the only step i was able to complete is deleting rundll32 i found it under system 32 all other steps didnt work because i kept getting that pop out denied access…i need help @WesleyB
Hi I did have antivirus plus but now i think it’s gone. The problem is that my internet has completly stopped working. I don’t know if this is related but I could desperatly have some advice on the issue. Thanks.
Hi
My friend’s computer has been infected twice in a week by two different versions of this virus. Unfortunately, the only way I could get rid of it (he is not very tech savvy) was to reload windows by running the computer in debugging mode (when I tried to boot the computer in any other mode, including “safe” mode, it just crashed before loading windows and re-booted on a continuous cycle). The virus turned off his genuine anti-virus program and when I tried to delete the virus program file (running in debugging mode)it denied access with an error message saying the file itself was infected with a virus. I tried running regedit and the same thing occurred. Everything I tried was either blocked with the bogus “file infected” message, or “administrator has blocked access to this file” (I was running in the administrator account). I have never seen anything take over a system like this thing!
I’m having the same problem as sylvester. Started getting the stupid Antivirus plus messages and therefore started looking online to find how to get rid of it. However, the more I used the computer the more it messed up. Then is shut itself down. When I try to boot it up, it doesn’t even get all the way through the Windows XP load screen before restarting itself…in a horrific never ending process. How to get rid of it now???
I can’t stop the executables because getting to the actual task manager is blocked. Telling me the admin took away my permissions to use it.
I don’t think anyone can solve this issue fully. Since the info I have on my laptop is not critical. I never put account numbers on there, I’m going to have to reformat the C drive. This sucks and I’d like to meet the guy that made this program so I could give him/her a piece of my mind and more. =0)
How do you add this to your host file so it will block the pop-ups?
would the hosts file entry be 98.124.199.1 antivirus-plus.org?
I definitely am infected with Antivirus Plus. I have Spyware doctor and Malware Anti-Malware (renamed to try and trick the virus) on a flash drive ready to go, but I cannot log onto Windows XP. I’m assuming this is caused by the virus? I have tried to log on to Windows in Normal and Safe Mode, and my computer acts likes it trying, but simply will not log on. Any advice? Thanks.
Brian: Try repairing PC instalation if you got install disks. You got little option as long as you can’t log into windows.