Antivirus .NET
January 28, 2011
What is Antivirus .NET?
Antivirus .NET is the latest of rogue antispyware programs to hit the web. These are programs that pose as legitimate utility software, scaring users with fake security scans and warning messages, however these programs are fraudulent and are actually spyware themselves.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
Antivirus .NET is typically installed via a Trojan, and it usually is found on questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
Antivirus .NET is the latest rogue antispyware program from a ”family” or rogues that has a long history - previous versions/names for this rogue include Antivirus Scan, Security Suite, Antivirus Action, AV Security Suite, and Antivir Solution Pro among thers.
What it Does:
Antivirus .NET will constantly bombard your computer with phony system alerts and spyware scans, trying to scare you into purchasing the full version, which is nothing more than a hoax as Antivirus .NET is not legitimate software and is actually a spyware infection. Antivirus .NET can also hijack your web browser and redirect your search results to pages of its choosing, where you will likely encounter more fake alerts and system related warnings.
The larger threat that Antivirus .NET poses however, just as with any other rogue antispyware program, is that it can download and install other extremely malicious malware that can log your keystrokes, websites visited, browsing habits, etc. and can send that information over the internet to a remote server where the hacker that created Antivirus .NET can then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – which can ultimately lead to identity theft.
Optional Antivirus .NET Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend against attempting manual removal of Antivirus .NET unless are a trained computer professional. Antivirus .NET is a highly complex and dynamic spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry wihout proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
.exe
2. Delete Following Files and Directories
Windows XP
%UserProfile%\Applicaton Data\{random numbers}\{random numbers.exe}
Windows 7 and Windows Vista
%UserProfile%\AppData\Local\{random numbers}\{random numbers.exe}
3. Delete the following Registry keys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “{random numbers}”
HKEY_CURRENT_USER\Software\”{random numbers}”
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that Antivirus .NET will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the filenames, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that Antivirus .NET is completely removed from your computer.
PC Security 2011
January 6, 2011
What is PC Security 2011?
PC Security 2011 is the latest release of rogue antispyware programs – which are fraudulent programs that pose as legitimate security software in order to scam you out of money.
Recommended Removal Method:
Automatic Detection and Removal Using Spyware Doctor:
If you are blocked trying to download or install Spyware Doctor please follow the additional instructions found here.
Screenshots:
Additional Information:
Methods of Infection:
PC Security 2011 is typically installed via a Trojan and usually from somewhat questionable websites (i.e. pornography or gambling), but it has also been found on hijacked fake news websites and in torrent downloads.
Previous Versions:
PC Security 2011 is the latest in a long list of rogue antispyware that come from the same family and has previously been known as Win7 AV
What it Does:
PC Security 2011 will bombard your computer with all sorts of fake alerts and spyware scans in an attempt to scam you into purchasing the full version, which is nothing more than a hoax as PC Security 2011 is not legitimate software and is actually a spyware infection. PC Security 2011 also has the ability to take over your web browser and redirect your search results to other malware laden web pages, where you will likely be hit with more fake alerts and system messages.
Of much greater concern however, is that PC Security 2011 can also download and install other extremely malicious malware that has the abiltity to log your keystrokes, websites visited, browsing habits, etc. and can then send that information over the internet to a remote server where the hackers that created PC Security 2011 can then use that information in an attempt to gain access to your credit cards, bank accounts, and numerous other sensitive personal information – which can ultimately lead to identity theft.
Optional PC Security 2011 Removal Method – Manual Deletion (Not Recommended)
***Please note we highly recommend against attempting manual removal of PC Security 2011 unless are a trained computer professional. PC Security 2011 is a highly complex and dynamic spyware infection that can hide several random files throughout your computer’s registry and file system and makes manual removal almost impossible. In addition, deleting and modifying system files and your computer’s registry wihout proper knowledge and training can cause further issues and may even cause your computer to become inoperable. As such, proceeding with manual removal is done at your own risk and spyware-experts.com cannot be held responsible for any problems that may occur in doing so.***
If you need help performing any of these steps, please see our tutorials listed on the upper right hand side of this page.
1. Delete the Following Processes:
PC2011.exe
2. Delete Following Files and Directories
Windows XP
C:\documents and settings\all users\PC Security 2011
PC Security 2011.lnk
C:\Users\[Profile]\AppData\AppData\PC Security 2011
C:\ProgramFiles\PC Security 2011
C:\Users\[Profile]\Start Menu\Programs\PC Security 2011
C:\Users\[Profile]\AppData\Uninstall_Security.lnk
Windows 7 and Windows Vista
C:\documents and settings\all users\PC Security 2011
PC Security 2011.lnk
C:\Users\[Profile]\AppData\AppData\PC Security 2011
C:\ProgramFiles\PC Security 2011
C:\Users\[Profile]\Start Menu\Programs\PC Security 2011
C:\ProgramData\Uninstall_Security.lnk
3. Delete the following Registry keys
HKLM\SOFTWARE\Classes\CLSID\{C9C42510-9B41-42c1-9DCD-7282A2D07C61}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{C9C42510-9B41-42c1-9DCD-7282A2D07C61}
HKLM\SOFTWARE\PC2011
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\windiskdefend
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Windows Disk Defender
HKLM\SYSTEM\CurrentControlSet\Services\windiskdefend
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\PC2011
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PC2011
Important:
Note that even if you have followed all the above steps and performed the tasks correctly, it is highly probable that PC Security 2011 will remain on your computer and continue to cause problems. The reason for this is that the program is dynamic and can change the filenames, locations, etc. and can even add additional infected files while it is on your computer.
This is why we highly recommend an automatic detection and removal tool such as Spyware Doctor that can find these additional hidden files and ensure that PC Security 2011 is completely removed from your computer.
-
Editor’s Choice Winner
"Spyware Doctor also set a new record in the malware blocking test, scoring 9.7 out of 10 possible points"
-www.pcmag.com, October 15, 2009