Home > Rogue Anti-Spyware > AV Guard Online

How to remove AV Guard Online?

October 6th, 2011

What is AV Guard Online?

AV Guard Online is a misleading program which will present itself as anti-virus program and later will start asking you to pay of its license. No matter how trustworthy it looks, keep in mind that this scam relies on Trojans when it comes an infiltration moment and you can easily get it on your machine through a browser-based exploit, either flash or java. AV Guard Online is made by the same scammers as the latest Security Guard 2012 or OpenCloud Antivirus, so it will also become a real pain for its victims additionally. For trying to rip PC users off, it will start popping up and stopping whatever user will be trying to launch, so have no doubt you must uninstall AV Guard Online malware once it starts loading its fake popups and scanners on your computer.

As soon as trojan downloads the whole multitude of files of the rogueware, AV Guard Online creates some Registry entries and files of its own what allows it to launch once PC is rebooted. Just like any other fake antivirus, AV Guard Online will report numerous false threats detected on your computer and then will offer to remove them for you. This is the moment how AV Guard Online tries to get your money. Keep in mind, you must ignore any of its alerts! Security experts have reported that all its ‘viruses’ detected are legitimate system files that should never be deleted. In order to tricj you, it starts claiming:

Warning! Infection found
Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer.
Keylogger Zeus was detected and put in quarantine.
Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails.

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.

Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.

In a long run, AV Guard Online becomes really annoying as it starts showing startup malware scanners and continuously offers to update its license. According to its pop-up messages, only activating the licensed version will neutralize parasites. However, only legitimate anti-virus and anti-spyware programs can help you to stop this threat on your computer. To remove AV Guard Online completely, use these activation keys found by Xylitol. Just execute AV Guard Online and enter to disable majority of popups. Don’t forget to run TDSS Killer or anti-malware programs such as updated Spyware Doctor or Malwarebytes Anti-Malware to remove AV Guard Online leftovers.

6526765122
6593439566
6613528235
6637321723
6641354156
6874821958
6899692327
7246526785
7414541691
7592174565
7614643697
7659421734
7715438456
7852676282
7885832169
8132856849
8135259195
8196345414
8196375436
8355259195
8355289195
8356392329
8367636975
8525752718
8558121691
8567493449
8593214778
8838996945
8861321723
8874598414
9217234169
9217457527
9221581871
9285678582
9376471437
9378969331
9691962564
9859198478
9882676258
9972439689
9972665267

Video guide on how to disable AV Guard Online manually


AV Guard Online is Extremely dangerous

arrow AV Guard Online is a corrupt Anti-Spyware program
arrow AV Guard Online may spread via Trojans
arrow AV Guard Online may display fake security messages
arrow AV Guard Online may install additional spyware to your computer
arrow AV Guard Online may repair its files, spread or update by itself
arrow AV Guard Online violates your privacy and compromises your security
Download Spyware Doctor
for AV Guard Online detection

Note: Spyware Doctor trial provides detection of parasite like AV Guard Online and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



AV Guard Online screenshots


AV-Guard-Online

Manual AV Guard Online removal


Important Note: Although it is possible to manually remove AV Guard Online, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com.
Remove these AV Guard Online Registry Entries:
Remove these AV Guard Online files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other AV Guard Online infected files and get help in AV Guard Online removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing AV Guard Online and similar threats.

AV Guard Online is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only AV Guard Online can help you to remove it after you download the trial version. As soon as the victim downloads AV Guard Online trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, AV Guard Online offers to buy the full version to fix these false errors. If the user agrees, AV Guard Online does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as AV Guard Online, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install AV Guard Online, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as AV Guard Online, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as AV Guard Online?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. Gwynplaine
    October 7th, 2011 at 05:52 | #1

    Thank you so much for the tip, my friend! I was seriously freaking out. Thanks again

  2. gogirl
    October 7th, 2011 at 11:45 | #2

    ComboFix to the rescue! I tried several anti-malware programs (Spybot, AVG 2011, Emsisoft Antimalware, and Malwarebytes to no avail. My computer was having so many problems and wasn’t wanting to boot, so I downloaded (from another computer) HDD Regenerator on a USB stick, plugged it into my computer, hit F9 while booting, changed my boot drive to USB KEY, and ran HDD Regenerator. When it was finished, I could boot into Safe Mode and run ComboFix (which I also downloaded to my USB stick). Had to have all anti-virus programs turned off so I could run ComboFix (even though I had uninstalled one of the anti-malware programs, ComboFix said it was running, but there was an option to go ahead anyway AT YOUR OWN RISK, which I did). When it was finished running, it restarted my computer and everything works great! Love you COMBOFIX!! You’re the best!

  3. Kayla
    October 8th, 2011 at 10:46 | #3

    I cannot find the file that you type into the search bar when you enter “Xc” all I get is xcopy. How can I get around this? Can I just delete system 32 all together? Thanks!

    • October 8th, 2011 at 10:48 | #4

      Kayla: right-click on the shortcut on the desktop. The NAME changes each time.
      Under no conditions delete whole system32 – it would make your PC unusable.

  4. Kayla
    October 8th, 2011 at 10:55 | #5

    I right click on the desktop icon, go to properties and then go to the file location. From there I know in the video you search of Xc, so are you saying the name of the application that I am supposed to be renaming and then deleting changes? I don’t mean to be difficult, but just cannot locate the XcYH0… file that is in the video.

    • October 8th, 2011 at 11:04 | #6

      The location for the file is always the same. I looked up the name in the properties box (not the location), so I knew for which file to search. In your case it is different than Xc.

  5. Kayla
    October 8th, 2011 at 11:10 | #7

    Got it. It was a Jcc code. Thanks!

  6. Dom
    October 9th, 2011 at 02:31 | #8

    I have been fighting the AV Guard virus for a few days now, and I keep having the same problem. Any spyware/malware/antivirus I download will install, but none of them will run. Spyware Doctor opens, but freezes. Malwarebytes runs for about 10 seconds, then just closes. It doesn’t matter if I’m in safe mode or normal mode. What am I missing? Dell Laptop 1545 Windows Vista 32 bit service pack 2. Thanks!

    • October 9th, 2011 at 08:06 | #9

      Run TDSS Killer or Alternate Os scanner (from bootable CD). After that, try running anti-malware programs again.

  7. Dom
    October 10th, 2011 at 01:40 | #10

    I didn’t try it yet from a bootable CD, but so far TDSS killer only found 2 infected items which were quarantined. It didn’t seem to make a difference, and now TDSS killer doesn’t work either. Doesn’t matter if I change file name of any of the .exe files, the programs still won’t work? Will try bootable CD shortly….

    • October 10th, 2011 at 08:32 | #11

      Dom: TDSS Killer is against a special set of malware, where there are only 1-2 infected items, but it messes with other stuff and stops anti-malware programs from launching. So if it deleted 2 items, great, there should not be more. Investigate which 2 items got fixed, sometimes it has to delete some malicious file, but it can’t replace it automatically.

  8. PS
    October 12th, 2011 at 09:17 | #12

    Thank you. TDS killer got the anti-malware working for me. Great info. Thanks again.

  9. neha
    October 18th, 2011 at 03:48 | #13

    unfortunately i paid $72.86 for this fake antivirus ..and my laptop get hanged …so any suggestions to get rid off from this antivirus

  10. steve
    November 22nd, 2011 at 02:48 | #14

    the spyware wont let me access the internet to download any antispyware

    • November 22nd, 2011 at 11:14 | #15

      steve: disable proxy server, or move anti-spyware programs through usb disk

  1. No trackbacks yet.