Feb 23

Anti-virus-1 ( also known as Antivirus-1 ) is new rogue antispyware software that displays many fake warning alerts, messages and popups. It starts generating warning messages claiming system infection in order to force users into purchasing the full version of the program. Anti-virus-1 is a dangerous application and it should be deleted as soon as possible.

Risk Level : High ( Dangerous )

Note :- To safely & quickly detect Anti-virus-1, We highly recommend you to use the Removal Tool for Anti-virus-1.

Download – Removal Tool for Anti-virus-1

Screenshots:

Anti-virus-1

Anti-virus-1 Screenshot

Symptoms of Antivirus1

Pop up balloon warning messages claiming that your PC is infected.

  • "Critical System Error",
  • "Your computer is infected",
  • Hijacked homepage to obscure webpage.
  • Flashing icons appear on your system tray (Near of your system clock).

Manual Removal Process: ( How to get rid of Anti-virus-1 )

Search and kill the following processes (Learn Here)

av1.exe, AV1i.exe, AV1i2.exe

Remove Anti-virus-1 files & folders (Learn Here)

C:\Documents and Settings\All Users\Application Data\AV1
C:\Documents and Settings\All Users\Start Menu\Programs\Anti-virus-1
C:\Documents and Settings\All Users\Application Data\AV1\AV1.cab
C:\Documents and Settings\All Users\Application Data\AV1\av1.exe
C:\Documents and Settings\All Users\Application Data\AV1\AV1i.exe
C:\Documents and Settings\All Users\Application Data\AV1\AV1i2.exe
C:\Documents and Settings\All Users\Application Data\AV1\QWProtect.dll
C:\Documents and Settings\All Users\Application Data\AV1\svchost.exe
C:\Documents and Settings\All Users\Desktop\Anti-virus-1.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Anti-virus-1\Anti-virus-1.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Anti-virus-1\Uninstall.lnk

Remove/Modify corrupt Registry Entries (Learn Here)

HKEY_CURRENT_USER\Software\AV1
HKEY_CURRENT_USER\Software\AV1\AV1\{F275E931-AFEC-4f70-B0D4-CC2731B945E0}
HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
HKEY_CLASSES_ROOT\AppID\QWProtect.DLL
HKEY_CLASSES_ROOT\CLSID\{70FEAD04-A7FD-4B89-B814-8A8251C90EF7}
HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO
HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{70FEAD04-A7FD-4B89-B814-8A8251C90EF7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Monitor calibration”


Download – Removal Tool for Anti-virus-1

Leave a Reply

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word