Antivirus 2010 represents new generation of rogue security tools. Not only it uses misleading advertisements to gain a purchase, but also it crashes a system and loads fake Blue Screen of Death. The text on BSOD is fabricated and claims that MS Windows recommend purchasing Antivirus2010 to remove spyware from a machine. This recommendation is just a trick of Antivirus 2010 and it shouldn’t be trusted. Fake BSOD looks like this:

“***STOP: 0×000000D1 (0×0000000, 0xF73120AE, 0xC0000008, 0xC000000)
A spyware application has been detected and Windows has been shut down to prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0×0000000
If this is the first time you’ve seen this Stop error screen, restart you computer. If this screen appears again, follow these steps:
Click to make sure your antivirus software is properly installed. If this is a new installation, ask you software manufacturer for any antivirus updates you might need.
Windows detected unregistered version of Antivirus 2010 protection on your computer. If problem continue, please activate your antivirus software to prevent computer damage and data loss.”

If your computer displays this message, do not trust it and do not pay for Antivirus 2010 malware.

Antivirus 2010 spreads like many similar applications. It is distributed through online advertisements that are disguised as anti-virus scanners. If user clicks on such a banner, he or she is receives false reports about infections detected. Antivirus2010 tries to intimidate people by reporting nonexistent threats in order to get them interested in downloading this application. Sometimes Antivirus2010 might be installed by trojans without user’s consent.
Antivirus 2010 is not a security tool; it is dangerous computer parasite. Avoid downloading or buying this program.



Antivirus 2010 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Antivirus 2010 snapshot:
Antivirus 2010 removal

Automatic Antivirus 2010 removal Download

Antivirus 2010 manual removal:

Kill processes:
AV2010.exe svchost.exe wingamma.exe


Delete registry values:
HKEY_CURRENT_USER\Software\AV2010
HKEY_CLASSES_ROOT\AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}
HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
HKEY_CLASSES_ROOT\CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
HKEY_CLASSES_ROOT\Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}
HKEY_CLASSES_ROOT\TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Gamma Display"


Unregister DLLs:
IEDefender.dll


Delete files:
Program Files\\AV2010\\AV2010.exe Program Files\\AV2010\\svchost.exe WINDOWS\\system32\\IEDefender.dll WINDOWS\\system32\\wingamma.exe


Delete directories:
c:\Program Files\AV2010
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010

Memberships




ACRBO Logo

Association of Computer Repair Business Owners

www.acrbo.com

The Association of Computer Repair Business Owners (ACRBO) was founded in 2009 to support the growing network of Computer Repair business owners worldwide. ACRBO is dedicated to promoting industry education and improving consumer relations with professionalism and integrity.

GNB TECHNOLOGIES -VIJAYAWADA Technology