Personal Antivirus
From Wiki-Security, the free encyclopedia of computer security
|
|||||||||||||||||||||
Personal Antivirus is a rogue anti-spyware program that uses rigorous tactics to persuade computer users into purchasing the full Personal Antivirus application. Through fake notifications in the form of popups and system alerts, Personal Antivirus may appear to be a program that automatically detects computer parasites and warns you.
Personal Antivirus is known to automatically launch at startup of Windows making it difficult to manually detect and remove. Personal Antivirus comes from the same group of hackers who created Internet Antivirus Pro and General Antivirus, both of which are rogue anti-spyware applications.
To check your computer for Personal Antivirus, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Personal Antivirus and other threats. If you detect the presence of Personal Antivirus on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Personal Antivirus.
Contents |
Detection of Personal Antivirus (Recommended)
Personal Antivirus is difficult to detect and remove. Personal Antivirus is not likely to be removed through a convenient "uninstall" feature. Personal Antivirus, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Personal Antivirus and other spyware, adware, trojans and viruses on your computer.
Run a Personal Antivirus scan/check to successfully detect all Personal Antivirus files with the SpyHunter Spyware Detection Tool. If you wish to remove Personal Antivirus, you can either purchase the SpyHunter spyware removal tool to remove Personal Antivirus or follow the Personal Antivirus manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with Personal Antivirus. Personal Antivirus can come bundled with shareware or other downloadable software.
Another method of distributing Personal Antivirus involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Personal Antivirus on your system. Personal Antivirus installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with Personal Antivirus, use this SpyHunter Spyware dectection tool to detect Personal Antivirus and other common Spyware infections. After detection of Personal Antivirus, the next advised step is to remove Personal Antivirus with the purchase of the SpyHunter Spyware removal tool.
Symptoms
Personal Antivirus may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Personal Antivirus from your computer.
Remedies and Prevention
Personal Antivirus, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Personal Antivirus along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example Personal Antivirus, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Personal Antivirus and other types of spyware.
Remove Personal Antivirus manually
Another method to remove Personal Antivirus is to manually delete Personal Antivirus files in your system. Detect and remove the following Personal Antivirus files:
Processes
- c:\Program Files\Personal Antivirus\PerAvir.exe
- %UserProfile%\Application Data\Personal Antivirus\unins000.exe
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
- %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
- PersonalAntivirus[1].exe
- pav.exe
- %PROGRAMFILES%\PAV\pav.exe
- PersonalAV.exe
- Security Software.exe
DLLs
- wincontrol.dll
Other Files
- c:\Program Files\Personal Antivirus
- c:\Program Files\Personal Antivirus\uninstall.ico
- c:\Program Files\Personal Antivirus\activate.ico
- c:\Program Files\Personal Antivirus\Explorer.ico
- c:\Program Files\Personal Antivirus\unins000.dat
- c:\Program Files\Personal Antivirus\working.log
- c:\Program Files\Personal Antivirus\db
- c:\Program Files\Personal Antivirus\db\DBInfo.ver
- c:\Program Files\Personal Antivirus\db\ia080614.db
- c:\Program Files\Personal Antivirus\db\ia080618x.db
- c:\Program Files\Personal Antivirus\Languages
- c:\Program Files\Personal Antivirus\Languages\IAEs.lng
- c:\Program Files\Personal Antivirus\Languages\IAFr.lng
- c:\Program Files\Personal Antivirus\Languages\IAGer.lng
- c:\Program Files\Personal Antivirus\Languages\IAIt.lng
- c:\WINDOWS\system32\log.txt
- c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
- c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
- %UserProfile%\Application Data\Personal Antivirus
- %UserProfile%\Application Data\Personal Antivirus\settings.ini
- %UserProfile%\Application Data\Personal Antivirus\uill.ini
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
- %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
- %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
- %UserProfile%\Application Data\Personal Antivirus\db
- %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
- %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
- %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
- %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
- %ProgramFiles%\PersonalAV
- PersonalAV
Registry Keys
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
Known Variants
VirusBurst is a re-branded variant of other well-known rogue anti-spyware programs, including SpywareQuake, SpyFalcon, SpywareStrike, SpySheriff, SpyHeal and many other pseudonyms.
External links
 |
|
- Non-profit Malware Process Library - Non-profit website that list most known Spyware Process names.
- How Spyware And The Weapons Against It Are Evolving
- Windows System Update - Latest bug fixes for Microsoft Windows
- Manual Removal Instructions for Personal Antivirus - Learn how to remove Personal Antivirus.
- McAfee Threat Center - Library of detailed information on viruses.
- Remove Personal Antivirus - Easy Personal Antivirus removal steps. Parasite database on how to remove spyware and rogue anti-spyware programs.
|
