Monday, January 10, 2011

IE Antivir 3.4 Removal Guide

IE Antivir 3.4 Removal Guide
IE Antivir 3.4 is a program that is used to cheat the money of people by showing error message in the computer hard drive, memory and system. IE Antivir 3.4 adds a registry entries to make itself to start automatically when Windows boot. After that, IE Antivir 3.4 will do fake scan on the computer and then issue fake warning by showing pop ups to tell the the user that the computer has been infected by malwares which can only be removed by the full version of IE Antivir 3.4. Thus, the user is urged to purchase it. Do not believe any report given by IE Antivir 3.4 even the warning look so real. In fact, IE Antivir 3.4 cannot detect and remove any error of computer.

IE Antivir 3.4 can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified by IE Antivir 3.4 must be cleared by using Windows Registry Editor.

IE Antivir 3.4 should be removed immediately!


IE Antivir 3.4 Removal Guide
Kill Process
(How to kill a process effectively?)
%ProgramFiles%\IEAntiVirus\uninst.exe
%ProgramFiles%\IEAntiVirus\scan.exe

Delete Registry
[HKEY_CURRENT_USER\Software\Microsoft\Bind]
"Path" = %ProgramFiles%\IEAntiVirus
[HKEY_CURRENT_USER\Software\IEAntiVirus]
SystemID = 0x00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
antispy = "%ProgramFiles%\IEAntiVirus\scan.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
NoRepair = 0x00000001
NoModify = 0x00000001
VersionMinor = 0x00000002
VersionMajor = 0x00000002
DisplayVersion = "3.4"
DisplayIcon "%ProgramFiles%\IEAntiVirus\scan.exe,0"
DisplayName = "IE AntiVirus"
InstallLocation = "%ProgramFiles%\IEAntiVirus"
UninstallString = "%ProgramFiles%\IEAntiVirus\Uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE AntiVirus]

Remove Folders and Files
%ProgramFiles%\IEAntiVirus
%Programs%\IE AntiVirus 3.4.lnk
%UserProfile%\IE AntiVirus 3.4.lnk

No comments:

Post a Comment