Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
Infection Video Antivirus Scan

Antivirus Scan

Users who are looking for a reliable and beneficial security tool are urged to steer well clear of Antivirus Scan. Even though Antivirus Scan promotes itself as a powerful security application, any PC infected with this rogue is at incredible risk and users need to destroy Antivirus Scan before it destroys their PCs.

Download Spyware Removal Tool to Remove* Antivirus Scan
  • Quick & tested solution for Antivirus Scan removal.
  • 100% Free Scan for Windows

Antivirus Scan is unable to detect, quarantine or remove any infection or threat, and is nothing more than a harmful infection in itself. This evident in the fact that Antivirus Scan is only out to fleece consumers out of their money, while offering them nothing but an empty shell in return. Antivirus Scan will go out of its way to gain the trust of its intended victim. It will go about this in various ways, including making use of dubious fake security warnings which informs the user that his PC has been compromised. Some of the more notorious alerts to be on the lookout for include:

“Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.”

“Security Warning
Application cannot be executed. The file notepad.exe is infected. Do you want to activate your antivirus software now.”

Do not believe these fake notifications, and accept all the correspondence received from Antivirus Scan as incredibly suspect and suspicious. If you want to circumvent all the annoying and disturbing symptoms imposed by Antivirus Action, enter one of the following registration keys:

WNDS-G84H6-S854F-79ZA8-W4ERS
WNDS-6W954-FX65B-41VDF-8G4JI
WNDS-TTUYJ-7UO54-G561H-J1D6F

Do not think that simply by entering one of the above reg keys that you have successfully neutralized the treat. In order to limit the damage this terribly destructive rogue will cause to your system, eradicate Antivirus Scan at the first opportunity, and never part with your money for any of its products. In order to positively and permanently eliminate Antivirus Scan, make use of the removal power of a genuine and efficient security tool which will erase Antivirus Scan off the system for good, as well as offer increased protection against future attacks.

How to renew your internet connection:

This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
  1. Open Internet Explorer and go to >Tools< select >Internet Options<

  2. Select >Connections<

  3. Select >LAN Settings<

  4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

  5. Now you can download the SpyHunter scanner and remove the infection.

Download Spyware Removal Tool to Remove* Antivirus Scan
  • Quick & tested solution for Antivirus Scan removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Antivirus Scan

Files associated with infection (Antivirus Scan):

wyyibmnusbs.exe
utcobveusbs.exe
opjtrjfusbs.exe
okylhjwusbs.exe
kkkgwetusbs.exe
idlpqvtusbs.exe
fhwhwufusbs.exe
ajdyfheusbs.exe
%Appdata%\nkqjrqgji\eedipixuerb.exe
%Appdata%\uwlvrtpnt\yyyffeluerb.exe
%Appdata%\lvdbqunem\orwhnhnusbs.exe
%Temp%\gbogroude\vwndeckuerb.exe
%Temp%\xmygvnfna\xepgsmtuerb.exe
%Temp%\[random]\[random]affm.exe
%Documents and Settings%\All Users\Application Data\Antivirus Scan
%Documents and Settings%\All Users\Desktop\Antivirus Scan.lnk
%Documents and Settings%\All Users\Start Menu\Programs\Antivirus Scan

Processes to kill (Antivirus Scan):

wyyibmnusbs.exe
utcobveusbs.exe
opjtrjfusbs.exe
okylhjwusbs.exe
kkkgwetusbs.exe
idlpqvtusbs.exe
fhwhwufusbs.exe
ajdyfheusbs.exe

Remove registry entries (Antivirus Scan):

HKEY_CURRENT_USER\Software\Antivirus Scan
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:33921″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]affm.exe”
HKEY_CURRENT_USER\Software\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus Scan”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]affm.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Scan
Disclaimer

Comments

  1. kZ Dec 28, 2010

    Thank you soo muchhh :)
    This really helped :D

  2. Bernard Jan 16, 2011

    i cant find my windows vista Temp file or Documents And Settings file

  3. Jace Jan 17, 2011

    Same problem...cant find temp file or doc and set file...Please Help!

  4. Chase Jan 18, 2011

    I am using windows xp tablet and when I start up my computer, I have a small window of opportunity to open task manager, I managed to find the proccess of the anitvirus program and I am able to delete it, removing all of the error messages. But It still doesn't enable my internet and when I restart It it will still be there

  5. Pcthreat Jan 19, 2011

    Chase,
    When you use task manager to kill Antivirus Scan, in simple words - You only close the infection program. That doesn't mean it has been deleted. After this task, You must search your computer for the listed files (above the comments) and delete them manually or by using a reputable antispyware program.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.