Screenshot From http://siri-urz.blogspot.com/2009/09/antivirus-pro-2010.htmlAntivirus Pro 2010 usually infects a PC through Trojans or misleading ads on shady websites that claim to be online virus scanners.
Once Antivirus Pro 2010 infects a PC, users will notice the program preforming a system scan every time Windows is started. After Antivirus Pro 2010 finishes a system scan it will report a number of infections on the PC and will not remove them unless the user buys the full version of the software. This is a complete scam, the system scan is fake, the reported infections are fake and if users purchase Antivirus Pro 2010 they will quickly realize the software is useless, it does not remove infections or protect against future infections.
Antivirus Pro 2010 will also show numerous warnings and alerts stating the PC is infected, under attack, or not protected. These warnings and alerts are all fake, designed to frighten users into buying the software. Antivirus Pro 2010 may also hijack the browser and make browsing the web very difficult or impossible.
Antivirus Pro 2010 is a very dangerous PC infection that should be removed from infected computers. If your computer is infected with Antivirus Pro 2010, you can remove it now with VIPRE.
Click here to download VIPRE.
Posts
Hello,
ReplyDeletePleaz credit for the pic ;)
http://siri-urz.blogspot.com/2009/09/antivirus-pro-2010.html
Best regards
S!Ri
Hi S!R!,
ReplyDeleteAdded the credit, sorry I was not informed that the screenshot was taken from your site. I will look for this in the future before posting images.
I always try to credit images or content from other sources.
Not a problem, thanks for reactivity.
ReplyDeleteThe tool was a bit cracked... See protection level in Hight and Register button replace by Get Updates. This is why I recognize the bitmap ;)
Thanks for providing nice info for this antivirus software
ReplyDeleteCOULD YOU PLEASE TELL ME HOW TO COTACT THE MAIN SITE OF THIS SOFTWARE BECUSE I WANT TO CANCEL THE DAONLOADED SOFTWARE AND TO REFUND THE MONY WHITH MANY THANKS.
ReplyDeleteYOURS,
MR.KHALID
MY E-MALIL:WWW.q8_wicket@yahoo.com
WWW.Q8T.MAN@GMAIL.COM
Hi q8t,
ReplyDeleteIf you purchased Antivirus Pro 2010, the only way to get your money back is to dispute the charge through your credit card company.
Antivirus Pro 2010 is a scam that rips people off who purchase.
I suggest downloading the free 15-day trial of VIPRE to remove the Antivirus Pro 2010 infection from your computer.
Good luck!
Just yet another comment on containing it.
ReplyDeleteI did not install Antivirus Pro, so there was no software to remove. Looking for any of the files above ( I did not search all of them) seemed to generate no hits.
However the warning/ads continued. The original trojan was still there and running.
First do not respond to the questions. Don't close or select yes or no. It seems to generate more of them. No damage, just harder to destroy. Also it made it harder to see and stop any of them from running. Ignore them. You may see as many as 4 or 5 different "virus alert" popups or control screen. Again just ignore them initially.
I found if you start in SAFE mode, the trojan software does not run. You can delete files at your leisure here. Or run spybot or your favorite anti-malware here.
I also found I could start the taskmgr if I did it as soon as the machine showed a taskbar. If I waited, the malware seemed to either prevent it from starting or killed it quickly as it did start.
The same could be said for SpyBot. Start as soon as able. It will start.
I found a program: oxltsysguard.exe that appears to be the source of the issue. There were 2 or 3 files with similar names: I removed the executing process and deleted the files on disk.
In addition: under XP, in the \windows\prefetch area I deleted:
rececntly changed version of the (same date as the trojan appeared)
taskmgr
spybot (I was running spybot )
wmiprvse.exe
wuauclt.exe-### (an apparent variant of the real wuauclt.exe ) and stopped wuauclt.exe running as non-system owner.
I may have deleted others in the prefetch area. I do not recall. I am not sure how safe this is but, I had no apparent ill affects.
I also ran spybot to remove a single entry. You have to stop the oxltsysguard.exe before this else it recreates the malwale entry.
I would check to see if the proxies for any of your browsers were reset. IE seemed to be affected. Firefox can be but was not on my machine.
After all this, the machine is back and running even after several reboots to confirm it is OK.