Wednesday, October 19, 2011

How to remove AV Protection Online counterfeit

AV Protection Online vexes computer users showing a host of popups. In spite of their nice appearance, they do not contain a word of truth as the program is a fake computer security tool of common knowledge.
The program is supported at several web-sites cloned from single page. The addresses are changed frequently as web-browsers add them to black lists so that they become inefficient.
Precise estimate of the number of the adware websites visitors is not possible, for they do not participate in any ratings. Indirect assessment, however, has shown the websites attract a traffic of no less than a million visitors daily!
Since the websites offers to try the program, they are the main gateway through which copies of the counterfeit reach computer systems.
Remove AV Protection Online, if you have been enticed to install the rogue at its website or if you have bumped into it all of a sudden. In the latter case, it has been dropped by trojan.
The adware commits a number of insidious modifications that induce system errors on the background of enormous number of fake virus alerts it shows.
Click here to instantly launch download and installation of AV Protection Online remover that will delete the infection in the course of PC memory comprehensive purification.


AV Protection Online snapshots:

 





Manual remvoal guide:
Delete infected files:
%SystemRoot%\system32\[random].exe
%AppData%\[random]\
%AppData%\[random]\
%AppData%\[random]\
%AppData%\[random]\
%AppData%\[random]\AV Protection Online.ico
%AppData%\ldr.ini
%AppData%\svhostu.exe
%UserProfile%\Desktop\AV Protection Online.lnk
%UserProfile%\Local Settings\Temp\svhostu.exe
%UserProfile%\Local Settings\Temp\B.tmp
%UserProfile%\Start Menu\Programs\AV Protection Online\
%UserProfile%\Start Menu\Programs\AV Protection Online\AV Protection Online.lnk

Delete infected registry entries:
HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run\
(String) [random] = %SystemRoot%\system32\[random].exe
(String) [random] = %UserProfile%\Local Settings\Temp\svhostu.exe

No comments: