Attentive Antivirus - How To Remove?


Attentive Antivirus is rogue antivirus from WinWebSec family (new generation) and direct clone of System Doctor 2014. These parasites share both design and functionality. Both rogues will infect the system through trojans, hijacked pages or malicious advertisements. First you will see a fake warning screen claiming that Windows detected problem with privacy and is looking for a solution. It will claim that it installs antivirus, though the rogue has been preinstalled before and this step puts some links on desktop only.  After that Attentive Antivirus will display lots of popups and alerts to scare you into purchasing its full version. To scare you further, it will block majority of programs and display alert that the files you are trying to launch are infected.
Attentive Antivirus popups look like this:

Warning! Infected file detected
Location: File System
Suspicious activity detected in the application cmd.exe to the behavior of the virus Win32/Conficker.X. For your security and to avoid loss of data, the operation of application xxx.exe has been temporarily restricted.

Warning! Network attack attempt detected.
We strongly recommend activating full edition of Attentive Antivirus for repairing threats.

You can ignore all these popups, as all the threats detected by Attentive Antivirus are fake. However this rogue is dangerous as it comes with rootkits usually and is tough to remove.

Attentive Antivirus special removal instructions

  1. Reboot, press F8. Choose Safe mode with networking from menu.
  2. If you are asked, loggin to your account.
  3. Run msconfig. Disable all startup entries from ProgramData or Application Data folders.
  4. Download and other anti-malware programs just in case your browser fails to work in normal mode.
  5. Reboot normally.
  6. Download and scan your PC with, hitman, Malwarebytes to remove rootkit and Attentive Antivirus files.

Video version of these removal instructions are below.

If this approach fails, you can try to fake-register it with code : AF03E-902B6E19-6FD491E6-A33AF708-2B4B6DFE or create hitman Kickstarter usb on unaffected PC and booth the infected one from it.

Automatic Attentive Antivirus removal tools

Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Manual removal


Important Note: Although it is possible to manually remove Attentive Antivirus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on


Attentive Antivirus screenshots


About the author

 - Main Editor

I have started in 2007 after wanting to be more or less independent from single security program maker. Since then, we kept working on this site to make internet better and safer place to use.

July 27, 2013 08:54, July 28, 2013 12:49

3 thoughts on “Attentive Antivirus

  1. Is there any way to do this absolutely free? These companies are just as bad as the virus charging large fees to get rid of the virus…

  2. Start in safe mode. Delete IE temp files. Run msconfig. Uncheck any “unknown”publishers software from starting. Restart

Leave a Reply

Your email address will not be published. Required fields are marked *