Remove Malware and Viruses: AntiVirGear Ransomware

AntiVirGear Ransomware

AntiVirGear malware description and removal detail
Categories:Ransomware
Visible Symptoms:
Files in system folders:[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk [%DESKTOP%]\AntiVirGear 3.8.lnk [%PROFILE_TEMP%]\~nsu.tmp\Au_.exe [%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe [%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe [%STARTMENU%]\AntiVirGear 3.8.lnk [%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk [%DESKTOP%]\AntiVirGear 3.7.lnk [%PROFILE_TEMP%]\VPPLanguage.ini [%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe [%STARTMENU%]\AntiVirGear 3.7.lnk [%SYSTEM%]\bubbj.dll [%SYSTEM%]\jrpkmgh.dll [%DESKTOP%]\AntiVirGear 3.8.lnk [%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk [%DESKTOP%]\AntiVirGear 3.8.lnk [%PROFILE_TEMP%]\~nsu.tmp\Au_.exe [%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe [%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe [%STARTMENU%]\AntiVirGear 3.8.lnk [%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk [%DESKTOP%]\AntiVirGear 3.7.lnk [%PROFILE_TEMP%]\VPPLanguage.ini [%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe [%STARTMENU%]\AntiVirGear 3.7.lnk [%SYSTEM%]\bubbj.dll [%SYSTEM%]\jrpkmgh.dll [%DESKTOP%]\AntiVirGear 3.8.lnk

In order to ensure that the AntiVirGear is launched automatically each time the system is booted, the AntiVirGear adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run [%PROFILE_TEMP%]\~nsu.tmp\Au_.exe [%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe [%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe [%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

 
Detecting AntiVirGear:
  Files:  
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe
[%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe
[%STARTMENU%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk
[%DESKTOP%]\AntiVirGear 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe
[%STARTMENU%]\AntiVirGear 3.7.lnk
[%SYSTEM%]\bubbj.dll
[%SYSTEM%]\jrpkmgh.dll
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe
[%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe
[%STARTMENU%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk
[%DESKTOP%]\AntiVirGear 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe
[%STARTMENU%]\AntiVirGear 3.7.lnk
[%SYSTEM%]\bubbj.dll
[%SYSTEM%]\jrpkmgh.dll
[%DESKTOP%]\AntiVirGear 3.8.lnk  
   Folders:  
[%PROGRAMS%]\AntiVirGear 3.8
[%PROGRAM_FILES%]\AntiVirGear 3.8
[%PROGRAMS%]\AntiVirGear 3.7
[%PROGRAM_FILES%]\AntiVirGear 3.7  
   Registry Keys:  
HKEY_CLASSES_ROOT\CLSID\{3BC3AC5B-3BBB-9DBE-8166-EC650E3B9B48}
HKEY_CLASSES_ROOT\Interface\{0A0FC1A4-41D4-4793-9AC5-0B55CDC95AE9}
HKEY_CLASSES_ROOT\Interface\{14F47CA3-2291-4B3E-9ED4-8C7E6AE80851}
HKEY_CLASSES_ROOT\Interface\{2447284F-3590-4E8C-A869-049BD87CAD07}
HKEY_CLASSES_ROOT\Interface\{38EEEF46-CA24-4ACA-A90D-540978DF7252}
HKEY_CLASSES_ROOT\Interface\{3D5E5AE1-5DED-4520-BDC2-B9292EA708CA}
HKEY_CLASSES_ROOT\Interface\{409A05EF-1B48-4198-B6BF-993B8B52790C}
HKEY_CLASSES_ROOT\Interface\{47A93011-1004-440C-9960-BD3B0348A7C2}
HKEY_CLASSES_ROOT\Interface\{50B388D5-4A80-4191-8BCC-5DD031D7F3EE}
HKEY_CLASSES_ROOT\Interface\{58A1ACE6-0DBA-45D2-8154-E8253A7B87BB}
HKEY_CLASSES_ROOT\Interface\{73D25394-992F-43D1-BF92-48494CC0D1AE}
HKEY_CLASSES_ROOT\Interface\{7D2A83A4-0687-4704-937E-A29045826F77}
HKEY_CLASSES_ROOT\Interface\{A7FE54B2-B167-4017-BCCC-CF73B2F678E3}
HKEY_CLASSES_ROOT\Interface\{C183B073-2D7F-45BC-8967-80147CECEE45}
HKEY_CLASSES_ROOT\Interface\{F6FDBF9A-19A7-4F0A-9F46-6F015A067B44}
HKEY_CLASSES_ROOT\Interface\{F90A7969-20A0-4257-B39D-9C73D64CE3B0}
HKEY_CLASSES_ROOT\Interface\{FA38F299-57F8-4FEB-9096-715460AE943C}
HKEY_CLASSES_ROOT\TypeLib\{DE6AE29A-EB7D-4656-9418-26D5FCC9ADF5}
HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirGear 3.8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirGear 3.8.exe 3.8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirGear 3.8
HKEY_CLASSES_ROOT\Interface\{418985AE-4FE4-448D-83EE-238C887D8FC2}
HKEY_CLASSES_ROOT\Interface\{5F251303-F8C4-44C3-A7C2-9E8A93C59322}
HKEY_CLASSES_ROOT\Interface\{61840430-C7CF-43A0-9D49-3B3ED563FED1}
HKEY_CLASSES_ROOT\Interface\{765A8F7D-F57B-4601-A038-3F463A4D3193}
HKEY_CLASSES_ROOT\Interface\{77E616D5-5DB4-4B6A-8BDA-2BE4103A9921}
HKEY_CLASSES_ROOT\Interface\{8742F319-C916-4930-B781-1C148134C05C}
HKEY_CLASSES_ROOT\Interface\{897F5CB6-C1C1-494E-8F17-972784193442}
HKEY_CLASSES_ROOT\Interface\{A2224C72-745E-4046-882F-1A48C9311D77}
HKEY_CLASSES_ROOT\Interface\{AA500EFC-3C92-44C9-B1D6-7A7033343A50}
HKEY_CLASSES_ROOT\Interface\{AB5E9971-7086-4E6E-ADFA-BE9C685BE68B}
HKEY_CLASSES_ROOT\Interface\{AD7CA0BC-693A-4AF9-B31A-60472248F761}
HKEY_CLASSES_ROOT\Interface\{B2882CC2-0077-426B-916D-E0B9EA23A1B5}
HKEY_CLASSES_ROOT\Interface\{EE241504-6F15-49E4-847F-B4D7DA9EA8F9}
HKEY_CLASSES_ROOT\Interface\{F1666E4E-45C8-462A-97FF-BFD5A103BFFA}
HKEY_CLASSES_ROOT\Interface\{FD9A05E8-4A1E-45E6-B3B6-37CE20140278}
HKEY_CLASSES_ROOT\TypeLib\{AF0C5CBA-52E1-4B29-A2DC-58D91D599612}
HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirGear 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirGear 3.7.exe 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirGear 3.7
HKEY_CLASSES_ROOT\clsid\{1817ab5d-25bf-4d5e-ba90-6e5fe658fc5f}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{3bc3ac5b-3bbb-9dbe-8166-ec650e3b9b48}
HKEY_CLASSES_ROOT\clsid\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}\inprocserver32
HKEY_CLASSES_ROOT\interface\{0a0fc1a4-41d4-4793-9ac5-0b55cdc95ae9}
HKEY_CLASSES_ROOT\interface\{14f47ca3-2291-4b3e-9ed4-8c7e6ae80851}
HKEY_CLASSES_ROOT\interface\{2447284f-3590-4e8c-a869-049bd87cad07}
HKEY_CLASSES_ROOT\interface\{38eeef46-ca24-4aca-a90d-540978df7252}
HKEY_CLASSES_ROOT\interface\{3d5e5ae1-5ded-4520-bdc2-b9292ea708ca}
HKEY_CLASSES_ROOT\interface\{409a05ef-1b48-4198-b6bf-993b8b52790c}
HKEY_CLASSES_ROOT\interface\{47a93011-1004-440c-9960-bd3b0348a7c2}
HKEY_CLASSES_ROOT\interface\{50b388d5-4a80-4191-8bcc-5dd031d7f3ee}
HKEY_CLASSES_ROOT\interface\{58a1ace6-0dba-45d2-8154-e8253a7b87bb}
HKEY_CLASSES_ROOT\interface\{73d25394-992f-43d1-bf92-48494cc0d1ae}
HKEY_CLASSES_ROOT\interface\{7d2a83a4-0687-4704-937e-a29045826f77}
HKEY_CLASSES_ROOT\interface\{a7fe54b2-b167-4017-bccc-cf73b2f678e3}
HKEY_CLASSES_ROOT\interface\{c183b073-2d7f-45bc-8967-80147cecee45}
HKEY_CLASSES_ROOT\interface\{f6fdbf9a-19a7-4f0a-9f46-6f015a067b44}
HKEY_CLASSES_ROOT\interface\{f90a7969-20a0-4257-b39d-9c73d64ce3b0}
HKEY_CLASSES_ROOT\interface\{fa38f299-57f8-4feb-9096-715460ae943c}
HKEY_CLASSES_ROOT\typelib\{de6ae29a-eb7d-4656-9418-26d5fcc9adf5}
HKEY_LOCAL_MACHINE\software\antivirgear 3.8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirgear 3.8.exe 3.8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirgear 3.8  
   Registry Values:  
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run  
    
Removing AntiVirGear:
  An up-to-date copy of ExterminateIt  should detect and prevent infection from AntiVirGear.
    If you do not have ExterminateIt and you are worried that you may have infected computer,   you could run trial version of ExterminateIt,  or remove AntiVirGear manually.
  To completely manually remove AntiVirGear malware from your computer,  you need to delete the Windows registry keys and registry values, the files and folders  associated with AntiVirGear.
   Use Task Manager to terminate the AntiVirGear process.
   Delete the original AntiVirGear file and folders.
   Delete the system registry key parameters
   Update your antivirus databases or buy antivirus software  and perform a full scan of the computer.
  
    We recommends that all Internet users    back up any important information on their computers,    enable maximum protection from network attacks and malicious code on their computers,    refrain from executing suspicious programs received from untrustworthy sources.  
      ExterminateIt effectively and automatically removes AntiVirGear from you computer    and is a good solution for those who are seeking easy and effective protection for their computer    from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).  
      Download ExterminateIt!    to instantly get rid of AntiVirGear!  
Also Be Aware of the Following Threats:
Remove Professional.Spy.KeyLogger Spyware
Remove Web1.RealTracker.com Tracking Cookie
Crystars.Proto.Bomber Hacker Tool Removal instruction
Samb Trojan Symptoms






 














0
comments:
      


Post a Comment







Newer Post


Older Post



Remove Malware and Viruses Home Page




Subscribe to:
Post Comments (Atom)



Subscribe To







Posts










                  Atom
                










Posts












Comments










                  Atom
                










Comments


Blog Archive






▼ 

2009
            (836)
          



► 

02
            (88)
          



► 

04
            (2)
          





► 

03
            (34)
          





► 

02
            (31)
          





► 

01
            (21)
          







▼ 

01
            (748)
          



► 

31
            (21)
          





► 

30
            (20)
          





► 

29
            (30)
          





► 

28
            (36)
          





► 

27
            (35)
          





► 

26
            (31)
          





► 

25
            (29)
          





► 

24
            (27)
          





► 

23
            (25)
          





► 

22
            (32)
          





► 

21
            (27)
          





► 

20
            (24)
          





► 

19
            (27)
          





► 

18
            (15)
          





► 

16
            (3)
          





► 

15
            (13)
          





► 

14
            (27)
          





► 

13
            (24)
          





► 

12
            (20)
          





► 

11
            (23)
          





► 

10
            (17)
          





► 

09
            (19)
          





▼ 

08
            (23)
          

HyperBar Adware
VBS.Sitex Trojan
Bancos.GMB Trojan
winantispyware.com Tracking Cookie
Bancos.HUN Trojan
Bancos.FXY Trojan
Pigeon.AWJS Trojan
Routedsex DoS
Bancos.HMQ Trojan
Vxidl.ANA Trojan
QDel94 Trojan
Win32.Ptakks.C!Trojan Backdoor
Agent.iw Trojan
Win32.Pet.C!PWS!Trojan Trojan
Dadobra Trojan
AntiVirGear Ransomware
Exploiter.Server Trojan
Tesla Trojan
Phishbank.AQM Trojan
SillyDl.DDB Trojan
Pigeon.AIX Trojan
Bancos.AKP Trojan
Bancos.FYR Trojan






► 

07
            (32)
          





► 

06
            (19)
          





► 

05
            (30)
          





► 

04
            (29)
          





► 

03
            (29)
          





► 

02
            (31)
          





► 

01
            (30)
          









► 

2008
            (3208)
          



► 

12
            (855)
          



► 

31
            (26)
          





► 

30
            (30)
          





► 

29
            (31)
          





► 

28
            (24)
          





► 

27
            (34)
          





► 

26
            (27)
          





► 

25
            (24)
          





► 

24
            (32)
          





► 

23
            (13)
          





► 

22
            (30)
          





► 

21
            (31)
          





► 

20
            (26)
          





► 

19
            (28)
          





► 

18
            (21)
          





► 

17
            (22)
          





► 

16
            (30)
          





► 

15
            (33)
          





► 

14
            (28)
          





► 

13
            (27)
          





► 

12
            (37)
          





► 

11
            (21)
          





► 

10
            (27)
          





► 

09
            (25)
          





► 

08
            (31)
          





► 

07
            (24)
          





► 

06
            (31)
          





► 

05
            (30)
          





► 

04
            (33)
          





► 

03
            (23)
          





► 

02
            (28)
          





► 

01
            (28)
          







► 

11
            (813)
          



► 

30
            (27)
          





► 

29
            (31)
          





► 

28
            (25)
          





► 

27
            (27)
          





► 

26
            (30)
          





► 

25
            (31)
          





► 

24
            (22)
          





► 

23
            (26)
          





► 

22
            (25)
          





► 

21
            (23)
          





► 

20
            (28)
          





► 

19
            (31)
          





► 

18
            (30)
          





► 

17
            (28)
          





► 

16
            (28)
          





► 

15
            (24)
          





► 

14
            (25)
          





► 

13
            (28)
          





► 

12
            (25)
          





► 

11
            (35)
          





► 

10
            (30)
          





► 

09
            (27)
          





► 

08
            (31)
          





► 

07
            (36)
          





► 

06
            (36)
          





► 

05
            (27)
          





► 

04
            (5)
          





► 

03
            (28)
          





► 

02
            (24)
          





► 

01
            (20)
          







► 

10
            (784)
          



► 

31
            (21)
          





► 

30
            (16)
          





► 

29
            (17)
          





► 

28
            (23)
          





► 

27
            (17)
          





► 

26
            (16)
          





► 

25
            (16)
          





► 

24
            (21)
          





► 

23
            (20)
          





► 

22
            (23)
          





► 

21
            (14)
          





► 

20
            (17)
          





► 

19
            (22)
          





► 

18
            (16)
          





► 

17
            (15)
          





► 

16
            (21)
          





► 

15
            (26)
          





► 

14
            (24)
          





► 

13
            (32)
          





► 

12
            (16)
          





► 

11
            (26)
          





► 

10
            (37)
          





► 

09
            (41)
          





► 

08
            (36)
          





► 

07
            (31)
          





► 

06
            (25)
          





► 

05
            (28)
          





► 

04
            (30)
          





► 

03
            (51)
          





► 

02
            (42)
          





► 

01
            (44)
          







► 

09
            (756)
          



► 

30
            (44)
          





► 

29
            (46)
          





► 

28
            (37)
          





► 

27
            (41)
          





► 

26
            (45)
          





► 

25
            (28)
          





► 

24
            (3)
          





► 

23
            (38)
          





► 

22
            (46)
          





► 

21
            (45)
          





► 

20
            (7)
          





► 

19
            (30)
          





► 

18
            (26)
          





► 

17
            (22)
          





► 

16
            (31)
          





► 

15
            (23)
          





► 

14
            (29)
          





► 

13
            (30)
          





► 

12
            (27)
          





► 

11
            (34)
          





► 

10
            (31)
          





► 

09
            (19)
          





► 

08
            (28)
          





► 

07
            (26)
          





► 

06
            (20)


Usefull Links

Info about malware |  Computer Infections




Search Viruses














ExterminateIt, powerful anti-virus and anti-malware solution defends your PC and notebook with ease. Now you can feel the meaning of Real Personal Protection with Submit State feature fastest possible responder to Your Threats in 24 hours. Huge everyday-updated Malware Database sustains your protection. It is compatible with other security suites.

User reviews:
Having wasted better part of a day on a Vundo infection, which none of the antivirus/antispyware solutions I normally use came even close to handling (one of them actually compounded the problem due to a partial fix, causing all browsers to seemingly lose connectivity after a few seconds), Exterminate It! fixed it in a single pass and one restart.
Nothing short of perfect. A few dollars very well spent.
Does not slow your machine dow, I will use it check my system often as there seems an influx of Malware and others around at the moment. As I said it is fast and does not take up resources.

Remove Malware and Viruses

AntiVirGear Ransomware

Detecting AntiVirGear:

Removing AntiVirGear:

0 comments:

Subscribe To

Blog Archive

Usefull Links

Search Viruses

User reviews: