Free malware removal tool to remove Antivirus7

Written by Administrator | Saturday, 20 March 2010 17:02

Antivirus7 is a rogue Antispyware, a fake Antivirus, it's a malware that pretends to be an Antivirus. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Antivirus7. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Antivirus 7 immediately from your system.

Antivirus7

To remove Antivirus7 (Uninstall Antivirus7)

Download this free removal tool for Antivirus7
Extract it
Launch
Click on the delete button

Antivirus7 will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

Antivirus7.exe

Files :

%StartMenu%\AV
%StartMenu%\AV\Antivirus7.lnk
%StartMenu%\AV\Uninstall.lnk
%Desktop%\Antivirus7.lnk
%ProgramFiles%\AV
%ProgramFiles%\AV\Antivirus7.exe
%ProgramFiles%\Common Files\Uninstall
%ProgramFiles%\Common Files\Uninstall\AV
%ProgramFiles%\Common Files\Uninstall\AV\Uninstall.lnk
%ProgramFiles%\Antivirus7AV
%ProgramFiles%\Antivirus7AV\Antivirus7.exe
%ProgramFiles%\Antivirus7AV\unins000.dat
%ProgramFiles%\Antivirus7AV\unins000.exe
%system%\UpdateCheck.dll
%Desktop%\Antivirus7.lnk
%Programs%\Antivirus7 Antivirus7us
%Programs%\Antivirus7 Antivirus7us\Antivirus7.lnk

C:\Documents and Settings\All Users\Start Menu\AV7
C:\Documents and Settings\All Users\Start Menu\AV7\Antivirus7.lnk
C:\Documents and Settings\All Users\Start Menu\AV7\Uninstall.lnk
%ProgramFiles%\AV7
%ProgramFiles%\AV7\antivirus7.exe
%system32%\UpdateExplorer.dll
%Desktop%\Antivirus7.lnk

Registry

HKEY_CURRENT_USER\Software\EVAACD
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- "Antivirus7" = %Programs%\AV7\antivirus7.exe
- "AV7" = %Programs%\AV7\antivirus7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinNT-EVI 25.11.2009"
HKEY_CURRENT_USER\Software\FNULL246
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1