On Win-XP, how to REMOVE 'antivir'?

Page 1 of 2 12 LastLast

  1. Posts : 11
    Windows-7 Home Premium 64-bit
       #1

    [SOLVED:]On Win-XP, how to REMOVE 'AntiVir'?


    On a friend's PC w/Win-XP/SP2, they have an 'AntiVir' program installed, but it's
    wedged the machine, apparently trying to clear some spyware.

    So, I booted up in 'safe mode w/ networking', and when I go into
    control-panel, to the list of installed software, I do NOT find AntiVir!

    So, how would I REMOVE AntiVir?
    [I really don't "trust" software that doesn't put itself into the list-of-installed-sw. ]

    TIA...
    Last edited by SarasotaSlim; 20 Jan 2010 at 18:35.
      My Computer


  2. Posts : 5,807
    Windows 7 Home Premium x64 - Mac OS X 10.6.4 x64
       #2

    SarasotaSlim said:
    On a friend's PC w/Win-XP/SP2, they have some 'AntiVir' program installed, but it's
    wedged the machine, trying to clear some spyware.

    So, I booted up in 'safe mode w/ networking', and when I go into
    control-panel, to the list of installed software, I do NOT find AntiVir!

    So, how would I REMOVE AntiVir?
    [I really don't "trust" software that doesn't put itself into the list-of-installed-sw. ]

    TIA...
    Download a real anti-virus free app (AVG, AVAST, MSE, etc) and can to remove the threat...

    Also download MalwareBytes Anti-Malware and scan with it to also remove the threat if it is a spyware
      My Computer


  3. Posts : 11
    Windows-7 Home Premium 64-bit
    Thread Starter
       #3

    Download a real anti-virus free app (AVG, AVAST, MSE, etc) and can to remove the threat...

    Also download MalwareBytes Anti-Malware and scan with it to also remove the threat if it is a spyware
    Makes sense...was going to replace it with Avast anyway.

    Are you saying that AntiVir is itself spyware, rather than legit anti-spyware?
    Their website looked legit, but looks of course can be deceiving!

    [Or, maybe there are two flavors...a legit one and a 'mock' one that is spyware?]
      My Computer


  4. Posts : 759
    W7-Enterprise + WS-2008 (Converted to Workstation)
       #4

    hi !

    SarasotaSlim: "Their website looked legit"

    which website ?
    there are a lot of nice looking fakes...
    exactly what is the name of this program ?
    there are some programs that are hard to find in taskmanager, because their processes are named something completely different than the program itself.
      My Computer


  5. Posts : 382
    Windows 7 Ultimate 64 bit
       #5

    If you are trying to remove Antivir by Avira, there is a removal tool available on their website
    Avira Antivirus Solution - Download AntiVir Removal Tool
      My Computer


  6. Posts : 11
    Windows-7 Home Premium 64-bit
    Thread Starter
       #6

    Carolyn said:
    If you are trying to remove Antivir by Avira, there is a removal tool available on their website
    Avira Antivirus Solution - Download AntiVir Removal Tool
    Thanks.

    EDIT: [Carolyn: Nope, looked at that...that seems to be (another) tool to remove
    viruses, not a tool to remove the removal tool itself. ["Who's on first?"]

    To 'Avira': One should NOT have to 'chase down' a product's removal-tool (from a website
    or anywhere). That's a poor substitute for having product-removal 'builtin'...i.e. the installer
    then puts the program in the official list, where a button then exists to later
    remove the pgm if it is unwanted, or is causing trouble.

    Case in point is THIS one: Now one can NOT get to such a website (from THAT
    machine), because the product has jammed the machine. Sure, could waste my
    time chasing down the real 'removal tool' from their site, only later to learn that
    it won't remove it, because it's a 'fake'!? So, current plan is to try to remove
    it with Avast.

    (Maybe this is spyware trying to 'ghost' itself as being Avira AntiVir, but not.
    Who knows? Is it real or is it memorex? ) As I mentioned, it is NOT my
    machine, so I'm unclear of specifics of exactly how it got onto the machine.
      My Computer


  7. Posts : 759
    W7-Enterprise + WS-2008 (Converted to Workstation)
       #7

    hi !

    hackerman1 said:
    hi !

    SarasotaSlim: "Their website looked legit"

    which website ?
    there are a lot of nice looking fakes...
    exactly what is the name of this program ?
    there are some programs that are hard to find in taskmanager, because their processes are named something completely different than the program itself.
      My Computer


  8. Posts : 382
    Windows 7 Ultimate 64 bit
       #8

    EDIT: [Carolyn: Nope, looked at that...that seems to be (another) tool to remove
    viruses, not a tool to remove the removal tool itself. ["Who's on first?"]
    Oops, my bad (more coffee needed here)

    Download the AntiVir uninstaller,
    http://www.avira.com/en/documents/utils/av7_tools/en/avuninstXPeng.zip

    and
    Avira Reg Cleaner,
    http://www.avira.com/en/documents/utils/av7_tools/registrycleaner.zip

    Save them both to your desktop.

    Unzip both files to their own folder.

    Open the AvUninstXPeng folder. Close all programs including AntiVir, then double click on AvUnist.exe to run it. Click yes when asked if you want to remove AntiVir. When it is finished reboot your PC.

    Open the RegistryCleaner folder and double click on the Registry Cleaner file. Click the Remove RegKeybutton then click Ok. When it is finished Reboot your PC again.


      My Computer


  9. Posts : 382
    Windows 7 Ultimate 64 bit
       #9

    Another approach...

    Boot to safe mode, launch MSConfig and disable the Antivir startup.
      My Computer


  10. Posts : 11
    Windows-7 Home Premium 64-bit
    Thread Starter
       #10

    I finally solved it.

    I'm strongly suspecting that it is not the legit product, but some sort of a spoof equiv.

    At any rate, what I did was MANUALLY navigate into ..\program files\ and found an 'AV' sub-dir, with
    just a single file 'antivir.exe', so I deleted that and its parent 'AV' directory. Did that from 'safe mode'.

    No other spyware was found on the machine, using newest 'avast'.

    EDIT: The owner says it was NOT ever explicitly installed. Rather, one day,
    while browsing the web (with IE v7), "AntiVir" just appeared. Machine now
    has been upgraded to IE v8, and the Google Chrome browser has been installed
    and will be (mostly) used instead as the new browser.

    EDIT2: Another anomoly I found was that wifi would NOT connect, when I went
    into 'safe mode with networking'. I tracked that down: This was on a DELL laptop
    computer, and the DELL-provided network-mgr 'widget' was in charge. I shut
    that off, and gave back control of 'network manager' to the Win-XP-provided
    sys-tray widget, and THEN 'safe mode with networking' works as expected.

    Case closed. Thanks for all the input and ideas.
    Last edited by SarasotaSlim; 20 Jan 2010 at 19:18.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:10.
Find Us