Free malware removal tool to remove Antivirus Pro 2010

Written by Administrator | Friday, 04 December 2009 16:33

Antivirus Pro 2010 is a fake antivirus which installs itself on your system without your will. This fake Antivirus comes from WiniSoft family, they have just changed the name of the application, the file names, but the rest is the same. Its purpose is to scare you by posting false scan results so that you spend money on buying a full version which by the way doesn't even exist. Do not purchase this bogus application. Remove Antivirus Pro 2010 as soon as possible from your system.
Beware of this scam.

To remove Antivirus Pro 2010

Download and extract the free removal tool for Antivirus Pro 2010
Run
Click on the delete button

Antivirus Pro 2010 will be removed in 10s.

After running the patch, your homepage Internet Explorer becomes search.net-studio.org, done deliberately to erase all traces of malware, BHOs (Browser Helper Object) are also deleted. You can always restore this setting in Internet Explorer options.

Process of the malware

yxine.exe
AntivirusPro_2010.exe

Folders

%ProgramFiles%\AntivirusPro_2010
%ProgramFiles%\AntivirusPro_2010\data

Files

%AppData%\Microsoft\Internet Explorer\Quick Launch\AntivirusPro_2010.lnk
%Programs%\AntivirusPro_2010\AntivirusPro_2010.lnk
%Programs%\AntivirusPro_2010\Uninstall.lnk
%UserProfile%\Desktop\AntivirusPro_2010.lnk
%ProgramFiles%\AntivirusPro_2010
%ProgramFiles%\AntivirusPro_2010\data
%CommonDocuments%\usurav.lib
%AppData%\azuloge.scr
%AppData%\efenyrygi.dl
%AppData%\sonisozivo.vbs
%UserProfile%\Cookies\mucipi.lib
%UserProfile%\Cookies\tacogijine.scr
%UserProfile%\Cookies\titotico._sy
%UserProfile%\Cookies\weryna.inf
%UserProfile%\Local Settings\Application Data\dexohoty.reg
%UserProfile%\Local Settings\Application Data\yvolij.dll
%UserProfile%\Local Settings\Application Data\yxine.exe
%UserProfile%\Start Menu\Programs\AntivirusPro_2010
%ProgramFiles%\AntivirusPro_2010\AntivirusPro_2010.cfg
%ProgramFiles%\AntivirusPro_2010\AntivirusPro_2010.exe
%ProgramFiles%\AntivirusPro_2010\AVEngn.dll
%ProgramFiles%\AntivirusPro_2010\htmlayout.dll
%ProgramFiles%\AntivirusPro_2010\pthreadVC2.dll
%ProgramFiles%\AntivirusPro_2010\Uninstall.exe
%ProgramFiles%\AntivirusPro_2010\wscui.cpl
%ProgramFiles%\AntivirusPro_2010\data\daily.cvd
%ProgramFiles%\AntivirusPro_2010\Microsoft.VC80.CRT
%ProgramFiles%\AntivirusPro_2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%ProgramFiles%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcm80.dll
%ProgramFiles%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcp80.dll
%ProgramFiles%\AntivirusPro_2010\Microsoft.VC80.CRT\msvcr80.dll
%ProgramFiles%\Common Files\aqicituzap.pif
%ProgramFiles%\Common Files\fijunuso.inf
%ProgramFiles%\Common Files\goke.scr
%Windows%\bawuge._dl
%Windows%\bezonyx.ban
%Windows%\qacigyjuw.bin
%Windows%\ruja.dl
%Windows%\system32\_scui.cpl
%Windows%\system32\epivafym._dl
%Windows%\system32\pocec.lib

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\AntivirusPro_2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusPro_2010
HKEY_CURRENT_USER\Control Panel\don't load scui.cpl
HKEY_CURRENT_USER\Control Panel\don't load wscui.cpl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Antivirus Pro 2010"