Antivirus 2010

Posted by elise in Blog Latest Parasite Threats, Latest Spyware News, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 2nd, 2009 | Leave a comment
TAGS: , , , ,

What is Antivirus 2010?
Antivirus 2010 is a clone of another two notorious fake anti-spyware programs named Antivirus2009 and Antivirus2008. Like most members in the rogue anti-spyware program family, Antivirus 2010 is also advertised through the use of advertisement on certain unknown web sites pending to be a Windows system malware cleaner. Those advertisements usually claim to scan your PC and then show up that your computer is infected with malware and you should download and launch Antivirus 2010 to clean up those infections.

Antivirus 2010, however, is also known to be advised and installed through the Trojan infection such as Vundo Trojan or Zlob.Trojan. Once this program is installed on your system, it will automatically create the following registry key and run whenever Windows system starts up: C:\Windows\System32\wingamma.exe executable.

Meanwhile, Antivirus 2010 will scan your computer and list various non-existent infections that can not be deleted until you purchase its full version. This rogue anti-spyware program also generates fake system alerts in your Windows system task bar; if you click on the popped up alerts, you will be directed to Antivirus 2010’s purchase page.

Do you have Antivirus 2010?
If you have enough time and expertise, you can search your computer for Antivirus 2010 manually. However, it might take hours to find out all files of Antivirus 2010, and it is possible that Antivirus 2010 will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Antivirus 2010
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Antivirus 2010 removal instructions
WARNING: The manually removal method is for advanced users. Antivirus 2010 manually removal can be difficult and time-consuming. There is no guarantee that Antivirus 2010 can be completely removed, for there are hundreds of files generated when Antivirus 2010 installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instructions below for Antivirus 2010 removal manually:

Navigate and stop the Antivirus 2010 processes:
AV2010.exe
AV2010[1].exe
AV2010Install.exe
Antivirus2010.exe
Antivirus 2010.lnk
Uninstall Antivirus.lnk

Navigate and delete Antivirus 2010 files:
AV2010.exe
AV2010install.exe
AV2010install_0011.exe
AV2010[1].exe
Antivirus2010.exe
winsrc.dll
ieupdates.exe
%program_files%\Antivirus 2010\AV2010.exe
%startmenu%\Antivirus 2010\Antivirus 2010.lnk
%startmenu%\Antivirus 2010\uninstall Antivirus 2010.lnk
%desktopdirectory%\Antivirus 2010.lnk
%program_files%\Antivirus 2010\AV2010.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2010.lnk
%UserProfile%\Desktop\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Uninstall Antivirus 2010.lnk
%ProgramFiles%\Antivirus 2010\AV2010.exe
%System%\scui.cpl

Navigate and remove Antivirus 2010 registry keys
HKEY_CURRENT_USER\Software\AV2010
HKEY_CLASSES_ROOT\AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}
HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
HKEY_CLASSES_ROOT\CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
HKEY_CLASSES_ROOT\Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}
HKEY_CLASSES_ROOT\TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Gamma Display”

What are the symptoms of Antivirus 2010?

  • Antivirus 2010 may be misleadingly advertised through websites
  • Antivirus 2010 may automatically start when you logon to Windows
  • Antivirus 2010 may display fake alerts and warnings
  • Antivirus 2010 may install an adware Trojan to infect Internet Explorer
  • Antivirus 2010 may decrease the system performance

How do I keep away from Antivirus 2010
Once you have cleaned up Antivirus 2010, the most important point to prevent Antivirus 2010 and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Antivirus 2010 and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Program?
Antivirus 2010 is a Rogue Anti-spyware Program.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.