Internet Antivirus Pro Cons Users to Buy Fake Antivirus Software
Internet Antivirus Pro is an extremely dangerous virus which has spread widely recently. It confuses users by popping up fake security alerts on their taskbar. It prompts users with messages like these: “Insecure Internet activity”, “Threat of virus attack “; “Due to insecure Internet browsing your PC can easily get infected with viruses, worms and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes”. This virus will thence trick users into purchasing their software. It will recommend users to protect their system and enjoy safe internet browsing by getting a full real-time protection via a link given.
This new counterfeit anti-spyware application is installed into users’ PC without their knowledge and permission using Trojans and other malware. With the fake alert notice, it intentionally leads users to purchase the fabricated antivirus software and probably that’s the way the creator makes money from non-tech savvy users. The risk level for this Internet Antivirus Pro is extremely high. Besides prompting users with the irritating messages, it can slow down the system, alter your browsers’ settings, affect your internet connection, etc.
Users can manually remove the dangerous application via the following steps:
1. Press “Alt+Ctrl+Delete” and go to “Task Manager”. Go to “Processes” tab and end process for these files: iv.exe, iavir.exe, InternetAntivirusPro.exe.
2. Subsequently you need to un-registry some files. To un-registry file, you need to go to your command prompt windows. Click “Start”, “Run” and thence type “cmd” and click ok. You can un-registry your vial by typing in this command: C:\“regsvr32 /u filename.dll
3. The filename above is the name of the file that you want to unregister. With this process, unregister the following files:
- iv.exe
- iavir.exe
- InternetAntivirusPro.exe
- %ProgramFiles%\IA\InternetAntivirusPro.exe
- %ProgramFiles%\Internet Antivirus Pro\activate.ico
- %ProgramFiles%\Internet Antivirus Pro\cookies.log
- %ProgramFiles%\Internet Antivirus Pro\db\config.cfg
- %ProgramFiles%\Internet Antivirus Pro\db\DBInfo.ver
- %ProgramFiles%\Internet Antivirus Pro\db\ia080614.db
- %ProgramFiles%\Internet Antivirus Pro\Explorer.ico
- %ProgramFiles%\Internet Antivirus Pro\IAUpdater.exe
- %ProgramFiles%\Internet Antivirus Pro\IAvir.exe
- %ProgramFiles%\Internet Antivirus Pro\Scanner.log
- %ProgramFiles%\Internet Antivirus Pro\unins000.dat
- %ProgramFiles%\Internet Antivirus Pro\uninstall.ico
- %ProgramFiles%\Internet Antivirus Pro\working.log
4. The next step is to remove and modify the corrupted Registry values. Again, go to “Start”, “Run” and type “regedit” to open your Registry Editor. Modify/remove the following infected or corrupted registry entries:
- HKEY_CURRENT_USER\software\microsoft\windows\currentversion\Internet Antivirus Pro
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Internet Antivirus Pro” = “”C:\program files\Internet Antivirus Pro\IAvir.exe” /s”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\”3P_UDEC_IA:” = “”[Installer Path]\IAInstall.exe” 0;C;”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\”iv:” = “””C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe”””
Related Articles
- Fake Alert to Update Security System Sent to Microsoft Windows Users
- Norton Internet Security and AntiVirus 2009 Beta Free Download with Product Activation Key
- Skip and Bypass Kaspersky Anti-Virus or Internet Security Incompatible Software Scan During Installation
- Lavasoft Unveiled Avira Based Antivirus Software Helix
- BitDefender Antivirus/Antivirus Plus v10 Reviews and Comparisons
- Restore, Enable and Display the Missing Internet Explorer (IE or IE7) Icon on Windows Vista Desktop
- New LG Vaccine USB Flash Drive With Antivirus And Malware Protection Software
- How to Increase Connection Limits in Internet Explorer 8
- Hack to Remove/Uninstall Symantec Norton Antivirus (SAV) Client without Password
- Personalize Internet Explorer with Your Own Name
Entries (RSS)
December 7th, 2009 02:55
If you can’t run any EXE file do this.
Download combofix on another computer and copy it over tot he infected one onto the desktop.
Create a shortcut to Combofix on the desktop also.
Copy the shortcut to the startup folder:
C:\Documents and Settings\”User name here”\Start Menu\Programs\Startup
Once copied reboot the computer, Combofix will run on startup.
Follow the prompts for Combofix and once the scan is completed restart and run Malwarebytes or any other good anti malware/antivirus program.
I hope the piece of shit that created this dies of third degree burns from a bic lighter after being sodomized by an elephant.
November 27th, 2009 13:20
I am trying to file a lawsuit against the guys that made this. Who are they?
November 27th, 2009 11:49
I need help removing this from my laptop! I don’t know how it got installed into my laptop and I can’t seem to get rid of it!! Because I didn’t install it, I can’t seem to find the source or where I can uninstall. I already have Malwarebytes on my laptop before the virus infected it, but the virus won’t let it open, so I tried putting Malwarebytes folder from another computer into a Cd, but it still won’t open. Redegit won’t open…I tried scanning in Safe Mode, but it didn’t go away. Does this mean that I can’t use my laptop anymore? Help please?
November 22nd, 2009 13:42
Can anyone post the address of the people who made this thing? You know, for possible legal action (or bloodletting).
October 22nd, 2009 01:48
that Antivirus System Pro has came back with a vengeance, now it blocks almost all new process/programs, even system properties were blocked, cant hardly run anything, command prompt,regedit, spyware scanner etc..
luckily, you can manual remove by rebooting in safe mode (F8), login with different account (Administrator), and run regedit, search in the usuals, “..\windows\current version\run” and delete the rouge start-up or suspicious entry, like from suspiciously unfamiliar folder, like “C:\Program Files\igvdc\gudsyiht.exe”, then manually Shift-Del that farking folder.
no shame in seeking a little knowledge, to learn something new and useful, no matter how useless you would imagine it to be..
October 3rd, 2009 05:48
Recently I got the same virus and my laptop was badly effected. My task manager and registry editor were blocked after sometimes and even I was not able to install and run Malwarebytes. Malwarebytes saved me many times but this time the virus is not allowing me to install it. After 3 hours of try and error, I tried something which worked and solved the issue. I installed Malwarebytes on other computer and copied the entire folder on a CD and used that CD to clean my laptop.
Good luck.
February 20th, 2009 10:17
hello me again just saying that i found a solution for all those that havent yet.
its here
http://forums.cnet.com/5208-6132_102-0.html?forumID=32&threadID=325555&messageID=2962835&tag=forums06;search-results
i got rid of it by downloading the antimalware, worked straight away!
February 20th, 2009 09:52
if someone that is really good would answer these comments it would help a lot thanks
im not gonna say im brilliant at computers because im not,im ok.I have the same problem as everyone else,except i have vista,so when i tried the thing that is posted above(the run…. thing) it didnt work…can anybody help me?i tried ending the progress but it just disappears and then reappears with a popup,its listed three times on the taskbar(dunno if any of this information is help)some sites it blocked sites that apparently held the solution to getting rid of it(i dont know because i couldnt get into them)seriously any new information will help,thank you
January 4th, 2009 10:29
I have PCillin antivirus protection and when
this virus started telling me I had viruses,
I ran my PCillin and it detected no viruses.
I did this several times with the same result,
no viruses.
So, I suspected that it was a scam to get
people to not only authorize a charge against
their credit card to pay for bogus virus protection but also to reveal their name,
card number and expriration date. I wasn’t completely sure about my suspicions until I did a search on the internet for “Internet Antivirus Pro” which confirmed my suspicions.
If the people who instigated this very dangerous and annoying virus are ever caught
they should be hanged by their ba**s.
December 29th, 2008 21:15
hello i got this program on my pc and found it to be very annoying i could not close it i could not get any where on my pc i went to add remove programs removed it and restarted my pc and it was still there in the task bar i could not get rid of it so i did a system restore and got rid of it apart from a few files witch i got rid of today but it changed some settings to my internet and it lost all data to do with my internet conection and i had to get a it friend of mine to fix the internet i think they are scum of the earth ripping people off of there hard earned money they need to be ripped off them selves to see how it feels and have there time wasted aswell low lifes
December 16th, 2008 08:31
the first step. i go in processes and the closes i can find to those are IApro.exe which im positive is the problem. But i end it. and seconds later it comes up again on the list.
October 15th, 2008 12:19
The people who make Internet Antivirus Pro need to be thrown in prison and be raped by big hairy tattooed covered convicts.
October 15th, 2008 01:09
The pop-ups are very annoying and allowing me to continue using the computer. Is there no law that coyuld go after these companies to take over other’s property and persnal space? Please advise more for removing this nuisance.
Thanks fro your assistance.
October 13th, 2008 21:56
Unfortunately this is not a new technique. I work I’m a tech for a shop and this is something we remove numerous times a week. Masquerading under many different names and locking out various parts of the OS such as start menu, regedit, task manager, desktop settings, screen saver the run prompt. Many are packaged with Vundo. Not all fixes posted above will completely remove the infection. We use MalwareByte’s Anti-Malware in conjunction with ComboFix. Most do not properly remove the left over injection .ini’s or the embeded registry strings forcing re-install on reboot. Only with these 2 applications have we found that truly remove the infections and leftovers.