Antivir Pro Solution Virus

If your PC keeps flashing adverts that promote the Antivir Pro Solution av, you may want to read this article on the antivir pro virus and learn how to remove antivir pro solution popups.

The Antivir Pro Solution Scam
The antivir solution basic, the antivir solutions platinum and the Antivir Pro sulotion are programs that are deceitfully promoted by the antivir solutions virus. While these programs look like legitimate antivirus security tools, they are actually rogue softwares that try to get people to buy and pay for a non working registration key.

Be warned never to spend money on any software promoted by the antivir solutions pro virus.

Symptoms of the antivir solutions malware include browser redirects and antivir virus warning popups. The antivir solutions platinum, for example, may keep redirecting you to a malicious domain where you are directed to download and purchase the antivir fake program.

Getting rid of antivir fake program is necessary since this malware can slow down your PC. You can delete antivir pro solution infection in your PC by running tools such as Malwarebytes.

Anti vir Pro Solution Removal: How to get rid of antivir pro solutions virus

* Download Malwarebytes’ Anti-Malware.
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a check-mark is placed next to the following:

Update Malwarebytes’ Anti-Malware
Launch Malwarebytes’ Anti-Malware

* Click Finish.
* If an update is found, Malbytes anti malware will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected. Reboot your computer if prompted.
* When completed, a log will open in Notepad. The antivir scam virus should now be gone.

7/17/2010

Comments

  1. jm says:

    antivir pro solutions virus does not get removed from computer with malwarebytes, superantispyware now. i have both and they are fully up to date. they find the virus but once i restart the computer two or three times it always comes back. I am not sure if someone has cloned that virus with a new trojan that acts like it but when you get rid of it you get a different style or maybe i have just been more infected with other viruses as well, but antivir always comes back in a day or two. looke like its time for a fresh new install of windows.

  2. Fabian says:

    I have the same problem but instead of days it’s a matter of minutes
    before the antivir pops up in the system tray and my mouse and keyboard stops working.
    I’m going to manually go through the autostart list and see if I can fix it,
    I will not go down without a fight. ;)

  3. Jeremy says:

    I can indeed confirm what jm said and a quick google of “how do I get rid of antivir pro” will show a ludicrous number of posts to yahoo questions and other such sites within the last week suggesting a new version of this virus has recently started to float around. Both my computer as well as my parents had been infected. While I was up at their place this weekend my father had mentioned he’d recently purchased Norton 360 for her notebook and that it had up to 3 pc installs and I figured it was worth a shot. Low and behold the sucker worked.

    When I reboot their machine now an error pops up saying 2 files cannot be found and both are related to the virus, thus I don’t think the machine is completely clean(since windows is trying to run it at a boot, unless I simply needed to clean their starup registry which I admit I am not the most tech savy). However, the virus does not change their internet settings anymore(if you can’t connect to the internet to download a new tool the virus changes your IE settings go to Tools -> Internet Options -> Connections -> LAN settings -> Now unclick the proxy server option that is currently checked and apply and you’ll have internet back). Additionally, none of the annoying messages pop up saying every file and its uncle is infested nor does the actual program ever load. The version of Norton 360 was 4.0 just for reference.

    An additional great tool I found from another website to help with this virus is called IExplore.exe which was created by someone over on Bleepingcomputer.com and it basically terminates all maleware processes currently running. Since the virus won’t let you open taskmanager to actually terminate the processes it can be frustrating shutting down the virus temporarily to download and install what you’ll need to remove it. This program when it is run will execute a cmd program that will essentially terminate all currently running malware processes. With this installed if you run it fast enough after a boot it will terminate the virus before it can start telling you every program is an error. It will have already changed your internet settings so use the above information to get that back if you need it.

    Hope this helps. I’m not sure how many people visit this website but I battled this beast for 3 days on 2 computers and this is currently my only solution. Since Norton can catch even this new iteration I assume some other major antivirus programs out there might as well. I know the free solution is always preferred, but a great and trusted antivirus program is any internet surfers best friend. I used to think differently, but many more people are becoming educated in the ways of tech and this will only increase the spread of new viruses thus making the need for a constantly active antivirus program all the more necessary.

  4. pd says:

    I fixed this on a windows xp pro machine today.
    Mostly through regedit.
    regedit was being blocked in normal user mode – had to log in in safe mode.
    In regedit, looked at this:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “ccfjxwwd“
    the value contained a path to an executable in user’s folder, in a sub folder also called “ccfjxwwd“.
    I deleted the reg key, and the sub-folder and contents.
    Restarted as a normal user. AntiVir activity gone.
    Checked proxy settings in browser : had to change these back to no proxy. The virus was running a webserver on localhost on some port like 6670 or something…
    Then opened regedit again and blew away the remaining crud in the reg, using this list:
    http://security-wire.com/08/how-to-remove-antispybrain-com-hijacker.html
    Most of the reg entries didn’t even show up on this machine.

    So far, so good.

Tags

  • windows pro solutions virus