Friday, December 10, 2010

Internet Antivirus 2011 Removal GuideInternet Antivirus 2011 Removal Guide

Internet Antivirus 2011 Removal Guide
Internet Antivirus 2011 is a fake antivirus program that cannot detect and remove any kind of virus, malware or trojan. However, Internet Security Suite. pretends to be a legitimate antivirus which can protect computers from the attack malwares. Once Internet Security Suite is installed on the computer, it will start automatically when Windows boot. Then Internet Security Suite will do a fake scan on the computer and will definitely scare the user with pop ups which shows that the computer has been infected by a lot of malwares. Internet Security Suite will repeatedly shows the pop ups to urge the user to purchase the full version of Internet Security Suite so that to remove all the threats. However, Internet Security Suite cannot detect and remove any kind of virus, malware and trojan.

Internet Antivirus 2011 can be removed by stopping the processes and removing the files ([random].exe, Internet Antivirus 2011.exe, pal.exe, CLSV.exe, exec.exe, energy.exe) by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Internet Antivirus 2011 shown in the removal guide below. Internet Antivirus 2011 DLL Files should be unregistered too (see removal guide). All files related to Internet Antivirus 2011 must be deleted.

Internet Antivirus 2011 should be removed immediately!

Internet Antivirus 2011 Removal Guide
Kill Process
(How to kill a process effectively?)
Internet Antivirus 2011.exe
[random].exe
pal.exe
CLSV.exe
exec.exe
energy.exe

Unregister DLL files
%Recent%\kernel32.dll
%Recent%\PE.dll
%Recent%\ANTIGEN.dll

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Antivirus 2011"
HKEY_CLASSES_ROOT\MSSSys.DocHostUIHandler
HKEY_CURRENT_USER\Software\3

Remove Folders and Files
%ALLUSERSPROFILE%\AppData\Microsoft\Internet Explorer\Quick Launch\Internet Antivirus 2011.lnk
%ALLUSERSPROFILE%\AppData\Internet Antivirus 2011
%USERPROFILE%\AppData\Microsoft\Internet Explorer\Quick Launch\Internet Antivirus 2011.lnk
%USERPROFILE%\AppData\Internet Antivirus 2011
%ALLUSERSPROFILE%\Application Data\[RANDOM]
%USERPROFILE%\Application Data\[RANDOM]
%Desktop%\Internet Antivirus 2011.lnk
%StartMenu%Internet Antivirus 2011.lnk
%Programs%\Internet Antivirus 2011.lnk
%Recent%\tempdoc.tmp
%Recent%\pal.exe
%Recent%\kernel32.dll
%Recent%\fan.drv
%Recent%\eb.sys
%Recent%\delfile.sys
%Recent%\DBOLE.drv
%Recent%\ppal.drv
%Recent%\PE.dll
%Recent%\cid.tmp
%Recent%\CLSV.sys
%Recent%\CLSV.exe
%Recent%\ANTIGEN.drv
%Recent%\ANTIGEN.dll
%Recent%\exec.exe
%Recent%\energy.exe

No comments:

Post a Comment