Antivir 2010

From Wiki-Security, the free encyclopedia of computer security

Antivir 2010 Information
Type:   Spyware
Analysis:
 
  Installs & gathers info from a PC without user permission.
Infection:
 
  By downloading freeware & shareware programs.
Symptoms:
 
  Changes PC settings, excessive popups
& slow PC performance.
Detection:   Download SpyHunter's Spyware Scanner.
IE Alert:


  If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

Antivir 2010 is a rogue anti-virus program, closely related to the Antivir rogue which appeared only a few months earlier, and to the rogue Alpha Antivirus. Antivir 2010 began infecting computers in January 2010, and it originated in Russia. Antivir 2010 should not be confused with an actual security product from German company Avira, which is always referred to as Avira Antivir. (Legitimate variations on Avira Antivir will have a year or version name following these first two words in the name.) As is often the case with these rogue anti-virus application scams, the hackers who made it have carefully chosen a name that is designed to inspire people to trust blindly that Antivir 2010 is real. Aside from taking part of the name of a real security suite, the "2010" was tacked on to make it look like the latest version of something genuine.

How Antivir 2010 Infects a Computer

Antivir 2010 operates in ways that are typical of a rogue antimalware scam. Most of the time, it is not downloaded knowingly by the user, but rather finds its way in with the help of a Trojan. The Trojan will be hidden in something harmless-looking that you download or update as you browse the Internet, and once the Trojan is downloaded, it initiates the download of Antivir 2010. It is also possible for Antivir 2010 to be downloaded voluntarily, from websites that claim to offer free virus “scans” or free "trial" downloads of this bogus software. Either way, once Antivir 2010 is on the system, the infection proceeds in the same way.

Antivir 2010 begins by changing some settings, particularly in the registry. Antivir 2010 will alter the registry so that it runs when Windows starts. Antivir 2010 may also change your settings in Internet Explorer to direct you away from sites that might offer support on removing the Antivir 2010 infection. Furthermore, there have been reports that Antivir 2010 may make changes in the System32 directory and drop malicious executable files. Those files can do even more harm than the Antivir 2010 infection itself. The Antivir 2010 rogue may create other files that are essentially harmless, with scary-sounding names, so that it can scan for them and "find" them later.

Antivir 2010 will first reveal itself by popping up with a phony "home screen" made to look like it belongs to some kind of real security software. This home screen is identical to that of the Antivir rogue, except that the Windows Security shield logo that Antivir used has been replaced by a shield logo that is black and yellow, and a slogan reading "Protection Against Malicious Software" in the upper right has been changed to a larger font. This home screen will claim that Antivir 2010 has run a scan on your computer and found a very large number of threats. It will provide you with a list of the “threats” as well as the file paths, so that you can delete them manually, because typically real antivirus software will do this. However, it is critically important that you do not delete these files that Antivir 2010 labels as threats, since most of them are actually harmless (and necessary) Windows components. Even assuming that you were to try to delete all of the files Antivir 2010 labels as threats, it would tell you that in order to remove everything, you need to pay for the licensed version of the software.

Other Scare Tactics Used by Antivir 2010

If you do not fall for the falsified system scan results, Antivir 2010 will try to scare you by generating one pop-up warning after another of some kind of catastrophic threat that poses a danger to your computer and your privacy. You will be prompted repeatedly to buy the “licensed” version of Antivir 2010 in order to protect your system properly. The con-artists who made Antivir 2010 know that most people are at least somewhat afraid of computer viruses and identity theft, and they capitalize on this in order to scare you into paying for a license that doesn't exist.

Do not trust what Antivir 2010 tells you, do not be manipulated by its scare tactics, and do not pay the people who created the nuisance that has taken over your computer!

To check your computer for Antivir 2010, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Antivir 2010 and other threats. If you detect the presence of Antivir 2010 on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Antivir 2010.

Contents

Detection of Antivir 2010 (Recommended)

Antivir 2010 is difficult to detect and remove. Antivir 2010 is not likely to be removed through a convenient "uninstall" feature. Antivir 2010, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Antivir 2010 and other spyware, adware, trojans and viruses on your computer.

Run a Antivir 2010 scan/check to successfully detect all Antivir 2010 files with the SpyHunter Spyware Detection Tool. If you wish to remove Antivir 2010, you can either purchase the SpyHunter spyware removal tool to remove Antivir 2010 or follow the Antivir 2010 manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with Antivir 2010. Antivir 2010 can come bundled with shareware or other downloadable software.

Another method of distributing Antivir 2010 involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Antivir 2010 on your system. Antivir 2010 installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with Antivir 2010, use this SpyHunter Spyware dectection tool to detect Antivir 2010 and other common Spyware infections. After detection of Antivir 2010, the next advised step is to remove Antivir 2010 with the purchase of the SpyHunter Spyware removal tool.

Symptoms

Antivir 2010 may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Antivir 2010 from your computer.

Remedies and Prevention

Antivir 2010, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Antivir 2010 along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example Antivir 2010, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Antivir 2010 and other types of spyware.

Remove Antivir 2010 manually

Another method to remove Antivir 2010 is to manually delete Antivir 2010 files in your system. Detect and remove the following Antivir 2010 files:

Processes

  • %Program Files%\AV\antivir2010.exe

DLLs

  • %WINDOWS%\system32\UpdateCheck.dll

Other Files

  • %Documents and Settings%\All Users\Start Menu\AV
  • %Documents and Settings%\All Users\Start Menu\AV\Antivir 2010.lnk
  • %Documents and Settings%\All Users\Start Menu\AV\Uninstall.lnk
  • %Program Files%\AV
  • %Program Files%\Common Files\Uninstall
  • %Program Files%\Common Files\Uninstall\AV
  • %Program Files%\Common Files\Uninstall\AV\Uninstall.lnk
  • %UserProfile%\Desktop\Antivir 2010.lnk

Registry Keys

  • HKEY_CURRENT_USER\Software\EVAACD
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antivir 2010
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV"

Known Variants

VirusBurst is a re-branded variant of other well-known rogue anti-spyware programs, including SpywareQuake, SpyFalcon, SpywareStrike, SpySheriff, SpyHeal and many other pseudonyms.

External links

Spyware infects over 80% of all PCs. Your PC could be infected with Spyware!
Wiki-Security highly recommends SpyHunter's Spyware detection tool to detect the latest Spyware threats.



Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by Antivir 2010 or its creators in any way. This website does not advocate the actions or behavior of Antivir 2010 and its creators. Our objective is to provide Internet users with the know-how to detect and remove Antivir 2010 and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of Antivir 2010 in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.
Views