Personal Antivirus
From Wiki-Security, the free encyclopedia of computer security
|
Personal Antivirus is a rogue anti-virus program; therefore, it is part of a scam. Personal Antivirus appeared in March 2009. It is from the same creators as General Antivirus and Internet Antivirus Pro, which are from a shady company called Innovagest 2000. Like many rogue anti-virus programs, Personal Antivirus does not infect a computer directly. Rather, what happens is that your computer gets infected with a Trojan called Zlob, which usually comes from some harmless-looking download or update that you may come across while on the Internet, and Zlob launches the infection of Personal Antivirus.
Scare Tactics Used by Personal Antivirus
Once Personal Antivirus is present on a system, it sets itself up to run whenever Windows runs. It will constantly run in the background and continuously generate alerts or warnings of some kind. Usually, one of the first things to happen with a new infection of Personal Antivirus is that the bogus antivirus software begins to run a fake system scan. When the scan is complete, Personal Antivirus will warn you that your computer is infected with an amazing number of extremely bad viruses, and it will tell you that if you want to repair the computer, you have to buy the "full" version of the Personal Antivirus software.Other Personal Antivirus Tricks Used to Scare Computer Users
Personal Antivirus generates other fake warnings and error messages in pop-ups, which occur almost constantly. The pop-ups will state in various different ways that your computer is under attack, and you should buy the licensed version of Personal Antivirus so that the attacks can be prevented or resolved. In case that does not convince you, Personal Antivirus will also hijack Internet Explorer and redirect it to sites that host the Personal Antivirus malware. It may block certain other websites from opening at all. All of the bogus interfaces, messages, and web sites that Personal Antivirus is associated with exist in order to scare you into paying money for an application that does not really exist.Do not fall for it. You can regain control of your computer, and paying someone ransom in order to do it is not necessary!
To check your computer for Personal Antivirus, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Personal Antivirus and other threats. If you detect the presence of Personal Antivirus on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Personal Antivirus.
Contents |
Detection of Personal Antivirus (Recommended)
Personal Antivirus is difficult to detect and remove. Personal Antivirus is not likely to be removed through a convenient "uninstall" feature. Personal Antivirus, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Personal Antivirus and other spyware, adware, trojans and viruses on your computer.
Run a Personal Antivirus scan/check to successfully detect all Personal Antivirus files with the SpyHunter Spyware Detection Tool. If you wish to remove Personal Antivirus, you can either purchase the SpyHunter spyware removal tool to remove Personal Antivirus or follow the Personal Antivirus manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with Personal Antivirus. Personal Antivirus can come bundled with shareware or other downloadable software.
Another method of distributing Personal Antivirus involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Personal Antivirus on your system. Personal Antivirus installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with Personal Antivirus, use this SpyHunter Spyware dectection tool to detect Personal Antivirus and other common Spyware infections. After detection of Personal Antivirus, the next advised step is to remove Personal Antivirus with the purchase of the SpyHunter Spyware removal tool.
Symptoms
Personal Antivirus may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Personal Antivirus from your computer.
Remedies and Prevention
Personal Antivirus, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Personal Antivirus along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example Personal Antivirus, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Personal Antivirus and other types of spyware.
Remove Personal Antivirus manually
Another method to remove Personal Antivirus is to manually delete Personal Antivirus files in your system. Detect and remove the following Personal Antivirus files:
Processes
- c:\Program Files\Personal Antivirus\PerAvir.exe
- %UserProfile%\Application Data\Personal Antivirus\unins000.exe
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
- %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
- PersonalAntivirus[1].exe
- pav.exe
- %PROGRAMFILES%\PAV\pav.exe
- PersonalAV.exe
- Security Software.exe
DLLs
- wincontrol.dll
Other Files
- c:\Program Files\Personal Antivirus
- c:\Program Files\Personal Antivirus\uninstall.ico
- c:\Program Files\Personal Antivirus\activate.ico
- c:\Program Files\Personal Antivirus\Explorer.ico
- c:\Program Files\Personal Antivirus\unins000.dat
- c:\Program Files\Personal Antivirus\working.log
- c:\Program Files\Personal Antivirus\db
- c:\Program Files\Personal Antivirus\db\DBInfo.ver
- c:\Program Files\Personal Antivirus\db\ia080614.db
- c:\Program Files\Personal Antivirus\db\ia080618x.db
- c:\Program Files\Personal Antivirus\Languages
- c:\Program Files\Personal Antivirus\Languages\IAEs.lng
- c:\Program Files\Personal Antivirus\Languages\IAFr.lng
- c:\Program Files\Personal Antivirus\Languages\IAGer.lng
- c:\Program Files\Personal Antivirus\Languages\IAIt.lng
- c:\WINDOWS\system32\log.txt
- c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
- %UserProfile%\Application Data\Personal Antivirus
- %UserProfile%\Application Data\Personal Antivirus\settings.ini
- %UserProfile%\Application Data\Personal Antivirus\uill.ini
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
- %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
- %UserProfile%\Application Data\Personal Antivirus\db
- %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
- %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
- %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
- %ProgramFiles%\PersonalAV
- PersonalAV
Registry Keys
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
External links
If you believe your computer is infected with spyware, |
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows
|