Im-Infected / Rogue / Antivir Solution Pro

Antivir Solution Pro

This part of web site contains full description and analysis on Antivir Solution Pro as well as removal procedures and necessary tools.

Options : » Discuss » Print » Bookmark

Date Posted: July 13th, 2010

Discussion: 3 Responses

Antivir Solution Pro is a malicious computer security application. A clone and successor to AV Security Suite that has infected and still compromising computers around the world. Antivir Solution Pro will reach a computer as long as it is connected to internet. This malware is advertise on various scam and fake online antivirus web site.

Once it gets inside the computer, alterations will be made to system registry so that Antivir Solution Pro will run when the computer is started. A virus scan will be performed by Antivir Solution Pro on Windows start-up. Numerous threats will be displayed and inform users that a licensed version can remove it. This is the primary technique of this unwanted program to be sold and earn a profit for its developers.

Remove Antivir Solution Pro instantly with powerful and legal anti-malware application. A manual removal is possible provided it will be carried out by a qualified computer technician.

Type Rogue
Sub-Type FakeAV
Aliases  
OS Affected Windows
Detected By MalwareBytes

What are the Symptoms of Antivir Solution Pro Infection?

antivir-solution

It will modify Windows Registry and add the following entries:

  • HKEY_CURRENT_USER\Software\Antivir Solution Pro
  • HKEY_LOCAL_MACHINE\Software\Antivir Solution Pro
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1?
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = ““
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555?
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1?
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random characters]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random characters]“

The threat will drop the following malicious file:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random characters].exe

How to Remove Antivir Solution Pro Manually

1. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
- Click Start > Run
- Type in the field, regedit
- Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
- Base on the given location above, browse and delete the file
- If no location is given, click Start>Search> and search for the files.
- If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program
- Update antivirus program
- Scan computer and delete all detected threats.

How to Easily Remove Antivir Solution Pro

1. Download and run Removal Tool to remove this computer threat.

Antivir Solution Pro Discussions

  1. Brad
    July 14th, 2010 at 18:40 | #1

    Malwarebytes worked for me, and unlike the others didn’t have a hidden cost after the download.

  2. Herb
    July 16th, 2010 at 10:51 | #2

    Yes. MalwareBytes does the job. But it does not protect the PC from being infected again. I have gotten the virus three times this week. It seems to come from the adult sites like tnaflix .com or possibly from empflix .com. Maybe I should quit using those.

  3. webmaster
    July 19th, 2010 at 12:11 | #3

    The free version of MalwareBytes can remove threats but it has no real-time scanning. MalwareBytes Anti-Malware full version offers this feature and was designed to protect a computer from rogue programs like Antivir Solution Pro.

  1. No trackbacks yet.