Antivirus 2010 Removal Tool

License: Freeware
File size: 58 KB

Antivirus 2010 is a rogue security tool that uses misleading advertisements to gain a purchase and crashes a system and loads fake Blue Screen of Death. The text on BSOD is fabricated and claims that MS Windows recommend purchasing Antivirus 2010 to remove spyware from a machine. This recommendation is just a trick of Antivirus 2010 and it should not be trusted.

Removal Tool:
Remove Fake Antivirus. (Download it here.)

Download Remove Antivirus 2010 1.0 at Softpedia
Download Source code of Antivirus 2010 Removal Tool

Antivirus 2010 Removal Guide
Kill Process
(How to kill a process effectively?)
"AV2010.exe"
"svchost.exe"
"wingamma.exe"

Delete Registry
HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}"
HKLM "SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012"
HKLM "SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013"
HKLM "SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0014"
HKCU "Software\AV2010"
HKCR "AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}"
HKCR "AppID\IEDefender.DLL"
HKCR "CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}"
HKCR "IEDefender.IEDefenderBHO"
HKCR "IEDefender.IEDefenderBHO.1"
HKCR "Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}"
HKCR "TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}"
HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "Windows Gamma Display"

Unregister
"IEDefender.dll"

Remove Folder
SetShellVarContext current
"$PROGRAMFILES\AV2010"
SetShellVarContext all
"$SMPROGRAMS\AV2010"
SetShellVarContext current
Delete "$SYSDIR\wingamma.exe"

Read more:
Constants in manual removal guide

Read also:

• Remove Fake Antivirus
• Safe Browser - Free 100% Protection!
• Correct way of using Browser to surf internet
• Why use Firefox rather than IE?
• How to kill a process effectively?
• Prevent Pendrive Virus forever
• Don't disable UAC or your computer will be attacked by malwares!
• Remove WGA (Windows Genuine Advantage) Notifications effectively
• How to patch without running WGA validation