Click here to visit Original posting
How to Remove Antivirus 10 (Removal Guide)
- Sat, 31 Dec 2016 14:04:21 EST
- Read 147 times
Antivirus 10 is a scareware program that pretends to an anti-virus program, but in reality is just a Trojan trying to scare you into purchasing it. This program is classified as a rogue because it deliberately displays false or misleading scan results, fake or misleading security warnings, and prevents you from running programs in Windows. As all of the detected threats are fake, please ignore the scan results and proceed with the rest of the removal guide to remove this Trojan.
While Antivirus 10 is running it will also display fake security warnings that are worded to make you think your computer is under attack or that infections have been detected. Examples of these warnings are:
System Information
Your system is infected. Last system scan found infected objects on your PC. It is highly recommended to remove infected objects as soon as possible.
System Alert
Malware has been detected on your computer. Click here to protect your PC with Antivirus 10
System Information
Antivirus10 has found viruses on your computer. It is recommended to disinfect files as soon as possible.
Windows Security Alert
Antivirus software is not activated. Your system is at risk now. Windows highly recommends you to activate your antivirus software to protect your system against malicious intrusions from the Internet.
Furthermore, Antivirus 10 will terminate the notepad, chrome, firefox, opera, mbam, taskmgr, and wordpad programs if they are running or when started. When it terminates these programs it will display a message stating that it is infected. It does this to further scare you into thinking your applications are infected so that you then purchase the program. An example message you may see when one of the above processes is terminated is:
Warning
This app has been blocked for your protection.
Windows has blocked the execution of this application to prevent further infections on your PC.
Program name: chrome.exe
Publisher: Google Inc
Status: Infected
Just like the fake scan results, these warnings are just another tactic to scare you into purchasing the program and should be ignored.
Antivirus 10 will randomly open up Viagra.com and Porntube.com using Internet Explorer in order to make you think your computer has infections that display popups. When it opens one of these sites, it will display one of the following two fake alerts:
System Warning
Attention! The security of your computer has been compromised! Microsoft Windows files are now corrupted. Malicious software, which can lead to irreversible damages to your hard drive have been found on your system! The destruction of important files in C:\\WINDOWS could lead to data loss, system errors and hard drive failure! Click YES to remove malicious software and protect your PC. (Recommended)
System Danager
Warning! Windows has detected virus infection! Somebody is trying to get access to your system files and steal your passwords! Prevent identity theft and remove viruses now (highly recommended
Last, but not least, Antivirus10 will randomly display a message that prompts you to purchase the program with a clever little catch phrase that was stolen from ESET Antivirus advertising. This advertisement states:
Your children catch colds. Your computer catches viruses. Protect your computer as if it was your own. Protect your system with effective antivirus solution. Powered by Antivirus 10.
How did Antivirus 10 get on my computer?
Antivirus 10 is currently being spread through SPAM posted on forums such as BleepingComputer.com. These SPAM posts will contain links that go to a now non-working site that promotes the Antivirus 10 software. It is also possible that it is being distributed through other means.
As you can see, Antivirus 10 was created solely to scare you into thinking your computer is infected so that you will then purchase the program. With that said, please do not purchase Antivirus 10 for any reason, and if you already have, please contact your credit card company and state that the program is a computer infection and a scam and that you would like to dispute the charge. To remove this infection and related malware, please follow the steps in the guide below.
[path_to]\Antivirus 10.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Securitysoft [path_to]\Antivirus 10.exe