Description: Earth Antivirus is a rogue anti-malware application related to the well-known rogue programs Green AV and Eco Antivirus, which tries to trick users into paying for a software license that is practically useless. This rogue program uses Trojans that get downloaded from fake online scanners and malicious websites to reach the user’s system. Once established on the user’s computer, Earth Antivirus will load itself up as a startup service and perform a large number of fake scans on the system, which will in turn show that the system is infected with dangerous viruses that don’t really exist. Earth Antivirus also goes as far as to show fake security warning pop-ups from the Windows Taskbar, and the realistic looking GUI also helps to create the illusion that this is a legitimate program.
The aim of all this activity is try and push the user into purchasing a license for the ‘full’ version of Earth Antivirus under the impression that the currently installed ‘trial’ version is incapable of scanning or cleaning the detected ‘viruses’. However, it is important to remember not to fall for this trick as no version of Earth Antivirus is capable of scanning or cleaning your system.
Earth Antivirus
» Download Earth Antivirus Removal Software
As soon as you find a copy of Earth Antivirus on your system, you should initiate Earth Antivirus removal. In order to delete Earth Antivirus, you need to stop its running processes, unregister its DLL files, delete its files and folders and remove its registry entries.
Earth Antivirus Manual Removal Procedures
The first step you need to take in order to remove Earth Antivirus is to stop the following processes:
- ergui.exe
- ErV_paid.exe
- eav.exe
- msdl.exe
- vec.exe
Next, it is necessary to unregister the following DLL files:
- gsl.dll
- WStech.dll
The next step in Earth Antivirus removal is to delete the following files and folders:
Windows XP:
- %Documents and Settings%\All Users\Start Menu\Programs\Earth AV
- %Documents and Settings%\All Users\Desktop\Earth AV.lnk
- %Documents and Settings%\All Users\Application Data\Earth AV
- c:\Documents and Settings\All Users\Application Data\eav
- c:\Documents and Settings\All Users\Application Data\eav\Base.dat
- c:\Documents and Settings\All Users\Application Data\eav\msdl.exe
- c:\Documents and Settings\All Users\Application Data\eav\msll.exe
- c:\Documents and Settings\All Users\Application Data\eav\vec.exe
- c:\Documents and Settings\All Users\Application Data\Microsoft\Machine
- c:\Documents and Settings\All Users\Application Data\Microsoft\Machine\WStech.dll
- c:\Documents and Settings\All Users\Start Menu\Programs\ Earth AV
- c:\Documents and Settings\All Users\Desktop\ Earth AV .lnk
- %APPDATA%\mozilla\firefox\profiles\\gsl.dll
- ergui.exe
- ErV_paid.exe
Windows Vista/7:
- %Documents and Settings%\All Users\Start Menu\Programs\Earth AV
- %Documents and Settings%\All Users\Desktop\Earth AV.lnk
- %Documents and Settings%\All Users\Application Data\Earth AV
- %USER%\AppData\eav
- %USER%\AppData \eav\Base.dat
- %USER%\AppData \eav\msdl.exe
- %USER%\AppData \eav\msll.exe
- %USER%\AppData \eav\vec.exe
- %USER%\AppData \Microsoft\Machine
- %USER%\AppData \Microsoft\Machine\WStech.dll
- %USER%\Documents\Start Menu\Programs\ Earth AV
- %USER% \Desktop\ Earth AV .lnk
- %APPDATA%\mozilla\firefox\profiles\\gsl.dll
- ergui.exe
- ErV_paid.exe
Earth Antivirus Registry Removal Procedures
File removal alone is not sufficient to completely delete Earth Antivirus. The following keys and settings need to be deleted from the Windows Registry in order to ensure complete Earth Antivirus Removal:
- HKEY_CURRENT_USER\Software\Earth AV
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Earth AV”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Earth AV
- HKEY_CURRENT_USER\Software\EAV
- HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
- HKEY_CLASSES_ROOT\AppID\WStech.DLL
- HKEY_CLASSES_ROOT\CLSID\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
- HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
- HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
- HKEY_CLASSES_ROOT\WStech.WStechB
- HKEY_CLASSES_ROOT\WStech.WStechB.1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\S
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mxcll"
Now it is safe to say that Earth Antivirus has been completely removed from your computer.
Earth Antivirus Directories:
- Vista and Windows 7 Users: %USER%\AppData \eav
- XP Users: c:\Documents and Settings\All Users\Application Data\eav
Outside Resources:
Speak Your Mind