Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: On Win-XP, how to REMOVE 'antivir'?


20 Jan 2010   #1

Windows-7 Home Premium 64-bit
 
 
[SOLVED:]On Win-XP, how to REMOVE 'AntiVir'?

On a friend's PC w/Win-XP/SP2, they have an 'AntiVir' program installed, but it's
wedged the machine, apparently trying to clear some spyware.

So, I booted up in 'safe mode w/ networking', and when I go into
control-panel, to the list of installed software, I do NOT find AntiVir!

So, how would I REMOVE AntiVir?
[I really don't "trust" software that doesn't put itself into the list-of-installed-sw. ]

TIA...

My System SpecsSystem Spec
.

20 Jan 2010   #2

Windows 7 Home Premium x64 - Mac OS X 10.6.4 x64
 
 

Quote   Quote: Originally Posted by SarasotaSlim View Post
On a friend's PC w/Win-XP/SP2, they have some 'AntiVir' program installed, but it's
wedged the machine, trying to clear some spyware.

So, I booted up in 'safe mode w/ networking', and when I go into
control-panel, to the list of installed software, I do NOT find AntiVir!

So, how would I REMOVE AntiVir?
[I really don't "trust" software that doesn't put itself into the list-of-installed-sw. ]

TIA...
Download a real anti-virus free app (AVG, AVAST, MSE, etc) and can to remove the threat...

Also download MalwareBytes Anti-Malware and scan with it to also remove the threat if it is a spyware
My System SpecsSystem Spec
20 Jan 2010   #3

Windows-7 Home Premium 64-bit
 
 

Quote:
Download a real anti-virus free app (AVG, AVAST, MSE, etc) and can to remove the threat...

Also download MalwareBytes Anti-Malware and scan with it to also remove the threat if it is a spyware
Makes sense...was going to replace it with Avast anyway.

Are you saying that AntiVir is itself spyware, rather than legit anti-spyware?
Their website looked legit, but looks of course can be deceiving!

[Or, maybe there are two flavors...a legit one and a 'mock' one that is spyware?]
My System SpecsSystem Spec
.


20 Jan 2010   #4

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hi !

SarasotaSlim: "Their website looked legit"

which website ?
there are a lot of nice looking fakes...
exactly what is the name of this program ?
there are some programs that are hard to find in taskmanager, because their processes are named something completely different than the program itself.
My System SpecsSystem Spec
20 Jan 2010   #5

Windows 7 Ultimate 64 bit
 
 

If you are trying to remove Antivir by Avira, there is a removal tool available on their website
Avira Antivirus Solution - Download AntiVir Removal Tool
My System SpecsSystem Spec
20 Jan 2010   #6

Windows-7 Home Premium 64-bit
 
 

Quote   Quote: Originally Posted by Carolyn View Post
If you are trying to remove Antivir by Avira, there is a removal tool available on their website
Avira Antivirus Solution - Download AntiVir Removal Tool
Thanks.

EDIT: [Carolyn: Nope, looked at that...that seems to be (another) tool to remove
viruses, not a tool to remove the removal tool itself. ["Who's on first?"]

To 'Avira': One should NOT have to 'chase down' a product's removal-tool (from a website
or anywhere). That's a poor substitute for having product-removal 'builtin'...i.e. the installer
then puts the program in the official list, where a button then exists to later
remove the pgm if it is unwanted, or is causing trouble.

Case in point is THIS one: Now one can NOT get to such a website (from THAT
machine), because the product has jammed the machine. Sure, could waste my
time chasing down the real 'removal tool' from their site, only later to learn that
it won't remove it, because it's a 'fake'!? So, current plan is to try to remove
it with Avast.

(Maybe this is spyware trying to 'ghost' itself as being Avira AntiVir, but not.
Who knows? Is it real or is it memorex? ) As I mentioned, it is NOT my
machine, so I'm unclear of specifics of exactly how it got onto the machine.
My System SpecsSystem Spec
20 Jan 2010   #7

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hi !

Quote   Quote: Originally Posted by hackerman1 View Post
hi !

SarasotaSlim: "Their website looked legit"

which website ?
there are a lot of nice looking fakes...
exactly what is the name of this program ?
there are some programs that are hard to find in taskmanager, because their processes are named something completely different than the program itself.
My System SpecsSystem Spec
20 Jan 2010   #8

Windows 7 Ultimate 64 bit
 
 

Quote:
EDIT: [Carolyn: Nope, looked at that...that seems to be (another) tool to remove
viruses, not a tool to remove the removal tool itself. ["Who's on first?"]
Oops, my bad (more coffee needed here)

Download the AntiVir uninstaller,
http://www.avira.com/en/documents/utils/av7_tools/en/avuninstXPeng.zip

and
Avira Reg Cleaner,
http://www.avira.com/en/documents/utils/av7_tools/registrycleaner.zip

Save them both to your desktop.

Unzip both files to their own folder.

Open the AvUninstXPeng folder. Close all programs including AntiVir, then double click on AvUnist.exe to run it. Click yes when asked if you want to remove AntiVir. When it is finished reboot your PC.

Open the RegistryCleaner folder and double click on the Registry Cleaner file. Click the Remove RegKeybutton then click Ok. When it is finished Reboot your PC again.


My System SpecsSystem Spec
20 Jan 2010   #9

Windows 7 Ultimate 64 bit
 
 

Another approach...

Boot to safe mode, launch MSConfig and disable the Antivir startup.
My System SpecsSystem Spec
20 Jan 2010   #10

Windows-7 Home Premium 64-bit
 
 

I finally solved it.

I'm strongly suspecting that it is not the legit product, but some sort of a spoof equiv.

At any rate, what I did was MANUALLY navigate into ..\program files\ and found an 'AV' sub-dir, with
just a single file 'antivir.exe', so I deleted that and its parent 'AV' directory. Did that from 'safe mode'.

No other spyware was found on the machine, using newest 'avast'.

EDIT: The owner says it was NOT ever explicitly installed. Rather, one day,
while browsing the web (with IE v7), "AntiVir" just appeared. Machine now
has been upgraded to IE v8, and the Google Chrome browser has been installed
and will be (mostly) used instead as the new browser.

EDIT2: Another anomoly I found was that wifi would NOT connect, when I went
into 'safe mode with networking'. I tracked that down: This was on a DELL laptop
computer, and the DELL-provided network-mgr 'widget' was in charge. I shut
that off, and gave back control of 'network manager' to the Win-XP-provided
sys-tray widget, and THEN 'safe mode with networking' works as expected.

Case closed. Thanks for all the input and ideas.
My System SpecsSystem Spec
Reply

 On Win-XP, how to REMOVE 'antivir'?




Thread Tools



Similar help and support threads for2: On Win-XP, how to REMOVE 'antivir'?
Thread Forum
No content in AVG antivir window Performance & Maintenance
Kicking the tires on the Avira AntiVir Rescue CD Security News
Any issue with Avira AntiVir..? System Security
Avira AntiVir 10 is Out System Security
Antivir 2010 is a new FAKE security application. Security News
AntiVir, 10 others, fail Virus Bulletin's latest tests System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:28 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33