Advanced Virus Remover Description

[+] Click Image to Enlarge

• 
• 
• 
• 
• 
• 
• 
• 
• 

Advanced Virus Remover (alternately known as AdvancedVirusRemover) is a rogue anti-spyware application. Its main objestive appears to be persuading users to purchase and install its licensed version. Advanced Virus Remover achieves this goal by first infiltrating the computer using affiliated trojans without informed consent. Secondly, Advanced Virus Remover then begins displaying numerous popup system warnings and system tray alerts reporting viruses that can allegedly damage confidential data and deteriorate the system performance. Advanced Virus Remover also runs fabricated security scans that return false results full of spyware applications, trojans, worms and other malware. These are all used to mislead the user into purchasing this malicious program, Advanced Virus Remover.

Type: Rogue Anti-Virus Program

How Can You Detect Advanced Virus Remover?

Advanced Virus Remover Technical Report

As new Advanced Virus Remover details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Advanced Virus Remover files with its MD5s were created in the system:

Advanced Virus Remover Removal Details

Advanced Virus Remover has typically the following processes in memory:

• SetupAdvancedVirusRemover[1].exe
• winupdate.exe
• AVR.exe
• %Program Files%\AdvancedVirusRemover\PAVRM.exe
• PAVRM.exe

Advanced Virus Remover creates the following files in the system:

• %UserProfile%\Desktop\Advanced Virus Remover.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Advanced Virus Remover.lnk
• Advanced Virus Remover
• %Program Files%\AdvancedVirusRemover
• %UserProfile%\Start Menu\Advanced Virus Remover.lnk

Advanced Virus Remover created the following directories, files, paths:

• %ProgramFiles%\AdvancedVirusRemover

Advanced Virus Remover creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU
• HKEY_CURRENT_USER\Software\AVR

Important Article Disclaimer