Web Talk

This guide will show you how to uninstall, get rid of and remove a fake antivirus called Antivirus.NET from your computer. Such software is a total scam, a “scareware” (such as Antivirus Action and Antivirus System Tool, for example)   whose goal is to make you think that it is a legitimate, good antivirus and that your Windows 7, Vista or Windows XP is infected by spyware and viruses. Once you have installed it on your computer, Antivitus.NET will automatically load every time you boot the machine. At this this point it will perform a fake, full scan of  the PC. Of course, the result will be that your computer is infected with different kinds of malware and that, in order to get rid of them, you need to buy the full version of the software. To convince you that your computer is really infected, Antivirus.NET will show you scareware, fake warnings (pop-ups) such as “Windows Security alert Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.” At the time writing there is no an ad-hoc Free Antivirus. NET removal tool. So, the only way you have got to get rid of it is to follow the procedure available in this guide. I have made it as simple as possible. So let’s see how to remove Antivirus.NET for good!

1. Reboot your computer to Safe Mode.
2. Click Start.
3. From the options available in the Start menu, select Restart Windows or Restart the System.
4. As soon as your computer reboots keep pressing F8 on your keyboard.  This will let you gain access to the Windows Advanced  Options Menu.
5. Select Safe Mode With Networking (second option) and hit Enter.
6. Now, let’s take care of your Internet Explorer browser (if you use if as your default browser). In fact, Antivirus.NET will modify certain parameters on the Microsoft browser in order to redirect your searches to a page where you can buy such a fake antivirus.
7. Open Internet Explorer. On the upper toolbar, click Tools.
8. Click Internet Options ( it should be the last option in the menu).
9. Click the Connection Tab.
10. Click the LAN Setting button.
11. Under the Server Proxy section, untick the Use a proxy server checkbox. Click OK.
12. Click the General Tab.
13. Under the Homepage section, check if there Antivirus.NET placed its fake homepage to trick you and convinceyou to buy the fake antivirus. If so, delete the web address and place www.google.com, for example.
14. Click OK and exit from IE.
15. Download  HijackThis.
16. Perform a full scan of your computer using HijackThis.
17. Look for the following entries (there could be some differences in the entry you get from the program. However they should be pretty similar. )

O4 – HKLM\…\Run: [audpdogk] c:\docume~1\user\locals~1\temp\akotrowvc\bcgcihiagnz.exe
O4 – HKCU\…\Run: [audpdogk] C:\Users\User\AppData\Local\akotrowvc\bcgcihiagnz.exe
etc.

18. Tick each checkbox next to such etnies and hit the Fix button.
19. Now, let’s go to Windows Registry to further clean our Windows operating system.
20. Click Start.
21. In the Search field (Run…if you have Windows Vista or XP), type regedit and press Enter.
22. Remove the following entries. Again, such registry keys may differ from computer to computer. Remove them only if they are pretty similar to the list below. Otherwise do not touch them!

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter | “Enabled” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyServer” = “http=127.0.0.1:30215″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyEnable” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | {random characthers}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | {random characthers}
HKEY_CURRENT_USER\Software\Antivirus .NET
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus .NET”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus .NET

23. Download Spybot Search & Destroy. Install it on your computer. Update it and launch a full scan (it might take up to an hour).
24. After the scan has finished, remove all the “infected entries” from the list.
25. Now, let’s remove and folder and file associated with Antivitus.NET.
26. Click Start.
27. In the Search field (Run…if you have Windows Vista or XP), type: Antivirus.NET and perform a search. Delete all entries found associated with the virus.

What  follows is a visual YouTube video guide on how to remove the fake Antivirus.NET malware from your computer