Threat Information: Antivirus Demo is a rogue spyware program which appears under the names Antivirus and Antivirus Agent. Antivirus (Demo) tries to trick users into purchasing its license. It enters a user’s computer via Trojans or other malicious software that downloads and installs Antivirus Demo. Once installed, this rogue software disables a large number of legitimate programs such as Windows Explorer, antivirus programs and even Notepad. Then it will endlessly perform fake system scans and return results that show that the computer is under threat from malicious software. This is an aggressive technique used to stop the user from trying to manually remove Antivirus Dem). This rogue software then proceeds to insist that the user should buy a license to the ‘full’ version of Antivirus (Demo), claiming that the currently installed ‘trial’ version is inadequate to clean the system of the falsely generated ‘threats’. Whenever the program is run, it will enforce this request through its GUI and through various pop-ups. However, the so-called ‘full’ version has no capability whatsoever to scan or clean your computer, and you should never fall for this trick and buy the software.
Antivirus Demo
» Download Antivirus Demo Removal Software
As soon as you find a copy of this malicious software on your computer, you should take steps to remove Antivirus (Demo). Antivirus (Demo) removal is a process which involves the stopping of processes, deletion of files and folders and the removal of registry entries.
Antivirus Demo Manual Removal Procedures
The first step you need to take in order to delete Antivirus Demo is to stop the following processes:
- %windows%\000b09274b.exe
- c:\78gbc8r.exe
- c:\avinstaller1.exe
The next step in Antivirus Demo removal is to delete the following files:
- %windows%\chnb8895.exe
- %windows%\000b09274b.exe
- c:\78gbc8r.exe
- c:\avinstaller1.exe
Antivirus Demo Registry Removal Proedures
Removing files and folders alone is not sufficient to completely remove Antivirus Demo. The following keys and settings should also be removed from the Windows registry to complete Antivirus (Demo) removal:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “avagent3974?
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “avguard3876?
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\freecell.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\limewire.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspaint.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmplayer.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wordpad.exe
Now it is safe to say that your computer is completely safe from Antivirus Demo. You should now run a full secuirty scan to ensure no other viruses are on your computer.
Antivirus Demo Directories:
- None
Outside Resources:
Speak Your Mind