Advanced Antivirus Info & Manual Removal Guide

Do you have Advanced Antivirus?

This “Advanced Antivirus Removal Guide” article will show you how to identify and remove Advanced Antivirus. This guide will be updated as more information is available.

Advanced Antivirus Detection Test

Run SpyHunter’s Spyware Scanner to check for Advanced Antivirus infections on your PC.

Advanced Antivirus Description

Advanced Antivirus, AdvancedAntivirus, Advanced Antivirus 2008, AdvancedAntivirus 2008 or AdvancedAntivirus2008, is a rogue anti-spyware program known by the experts as “the worst threat of this year”, family of infamous Windows Antivirus 2008, Vista Antivirus 2008 and Ultimate Antivirus 2008.

Advanced Antivirus may have leaped into the user’s computer system through a Trojan, such as Zlob, or by using drive-by download methods without the user’s knowledge. Once Advanced Antivirus is installed, it will emulate a fake system scan and generate false threat reports in an attempt to trick the user into purchasing the full Advanced Antivirus commercial version. Advanced Antivirus has the ability to display fake warning notifications and a fake icon on the user’s system tray stating that the computer’s system is infected with spyware. Advanced Antivirus’s rogue messages may read: “Critical System Error”, “Your computer is infected”, “Trojan-Spy.win32@mx”, “Virus Alert”, and “Security Alert”. If the user is deceived and clicks on one of these messages, the user will be redirected to Advanced Antivirus’s website (www.aav2008.com), where Advanced Antivirus is advertised as a legit software. Advanced Antivirus promises to deliver a solution to your supposed threats, when in reality, Advanced Antivirus is just another scam created to steal money from credulous users. In addition, Advanced Antivirus may hijack user’s homepage, redirecting them to malicious websites.

Advanced Antivirus launches on every Windows start up and has the ability to recreate itself. Advanced Antivirus may be difficult to manually remove and it’s considered a threat to user’s personal and financial information.

Parasite Type: Rogue AntiSpyware Programs

Advanced Antivirus Method of Automatic Detection

The removal of spyware such as Advanced Antivirus can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect Advanced Antivirus and other Spyware, Adware, Worms, Trojans and Browser Hijackers.

To quickly detect Advanced Antivirus, follow the instructions below:

Download SpyHunter’s Spyware Scanner.
Select “Start Scan” to run a full system Advanced Antivirus scan.
Reboot your computer.
Run another scan to pick up any remaining Advanced Antivirus infections.

** SpyHunter’s Spyware Scanner only allows you to detect Advanced Antivirus and other spyware. In order to remove Advanced Antivirus, we advise you to buy the full-version of SpyHunter. Weekly Advanced Antivirus file updates and technical support are available with SpyHunter’s spyware remover.

Advanced Antivirus Method of Infection

The following Advanced Antivirus actions occur:

The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like Advanced Antivirus are mostly pushed through adult websites.
The Internet user downloads a free video codec, such as Video ActiveX Enhancement 2.07, which comes bundled with Advanced Antivirus. Freeware or shareware programs tend to come with other unwanted programs such as Advanced Antivirus. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.
The Internet user is infected with the rogue anti-spyware program Advanced Antivirus. Advanced Antivirus runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears that lists the spyware ‘found’ and the user has to either click on a link or a button to remove it. This deceptive tactic is an attempt to scare the Internet user into clicking on the link or button to purchase Advanced Antivirus.
The Internet user closes all the fake Windows error messages and warnings and is unaware that Advanced Antivirus is still running its malicious tasks in the background. Advanced Antivirus reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.
Internet user opens web browser and is redirected to a rogue website. Known rogue websites that promote rogue anti-spyware programs are iesecurepages.com, ahomepcsafety.com, securitypills.com, softhomepage.com, asafetyliner.com, puresafetyhere.com, safehomesite.com, instantsafepage.com, safetyonlinepage.com, among others. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the ‘OK’ button.

Advanced Antivirus Symptoms

The following Advanced Antivirus symptoms occur:

Advanced Antivirus displays a fake system alert similar to a Windows notification message.
A red or green flashing icon appears in your system tray. If you click on the icon, a fake system alert pops up and directs you to a rogue website similar to safetyuptodate.com. In some cases, even when you don’t click on the icon the fake system alert may still pop up.
The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program.
Advanced Antivirus hijacks or modifies your homepage and displays new desktop shortcuts.
Advanced Antivirus changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes Advanced Antivirus won’t even allow you to change it back to your original homepage. A website you may be redirected to is Advanced Antivirus.com or other rogue websites that promote Advanced Antivirus.
Advanced Antivirus installs a rogue toolbar called Security Toolbar 7.1.
Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site which can install additional malware.
Advanced Antivirus bombards your PC with fake Windows warnings messages.
Even after you’ve closed all the Advanced Antivirus messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

System runs sluggishly. Computer system will suddenly start operating slower than usual. Spyware and Adware programs use computer’s resources to monitor user’s activities and deliver popups, causing computer slowdowns and even computer crashes.
Access to folders sometimes is possible only from the Explorer. It may also be possible to access folders from other folders and files manager, but impossible from standard Windows system navigator.
May destabilize operating system and even cause physical damage to user’s disks due to overwhelming intensity of resources use.

Advanced Antivirus Anatomy

As new Advanced Antivirus spyware components are reported by our customers and our Spyware Threat Research Labs, we will update this section.

Name: aav.exe
File Size: 333824
MD5: ba7ff7ab4720cebc176b9666b52a6fee

Name: AAVSetup[1].exe
File Size: 792893
MD5: ee217ba37015111b3cfc64c3c35de87f

Name: aav.exe
File Size: 333824
MD5: d3e98a9db44e599ab3a7674aaeffd7f1

Name: aav.exe
File Size: 377344
MD5: de26022f77cd4b90452097e8727d3cf1

Name: aav.exe
File Size: 333824
MD5: 00cbcdff13e5c710341393a19d260da6

Name: aav.exe
File Size: 333824
MD5: 6926bd8a5134262b308d7470bc5f5667

Name: aav.exe
File Size: 333824
MD5: d0dd6935d04572ee74164ac7c2fd2589

Name: aav.exe
File Size: 407040
MD5: 40ef838a59cff4b36193853a31bf3290

Name: aav.exe
File Size: 410112
MD5: 2660b7844bbdfe0fa51b31ed86bb0d86

Name: aav.exe
File Size: 411136
MD5: 626600d414841fa379b3c3ccef5d9a11

Name: AAVSetup[1].exe
File Size: 662810
MD5: 2246bc5ab4e8a7f773438d56800549bf

Name: aav.exe
File Size: 418304
MD5: 01adc5d8a302c28bee6420c1dc3f65ff

Advanced Antivirus Manual Removal Instructions

Use Caution! Please read the instructions below carefully. Manual removal of Advanced Antivirus is a delicate procedure. Proceed at your own risk. We advise you to backup your system before you manually remove Advanced Antivirus.

If you are still having problems with Advanced Antivirus after completing these instructions, we recommend you download SpyHunter’s Spyware Detection Tool to safely remove Advanced Antivirus.

To manually remove Advanced Antivirus, follow these removal steps:

Step 1: How to Kill Advanced Antivirus files using Process Explorer.

1a. How to Kill Advanced Antivirus Processes.
1. Download and install Process Explorer.
2. Open Process Explorer.
3. Locate the Advanced Antivirus processes listed below.
4. To kill an Advanced Antivirus process, right-click the Advanced Antivirus process and choose the option “Kill Process Tree”.
5. Kill the following Advanced Antivirus processes:
  AAVSetup[1].exe
  aav.exe
  c:\Program Files\AAV\aav.exe

Step 2: How to Delete Advanced Antivirus Registry Keys and Values.

Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.
Rename the .txt file as a .reg file and call it “Delete_Registry_
Advanced Antivirus_Entities.reg”. This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.
Right-click and select the “Edit” option.
Copy and paste the Advanced Antivirus keys listed below.
In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.
Double-click on the .reg file.
When the message box appears saying “Are you sure you want to add the information in C:DOCUME~1%username%DesktopDELETE~1.REG to the registry?”, click the “Yes” button.
When the message box appears saying “Information in C:DOCUME~1
%username%DesktopDELETE~1.REG has been successfully entered into the registry.”, click the “OK” button.
The Advanced Antivirus registry keys have been deleted from your registry.

Copy and paste the following Advanced Antivirus keys:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\aav.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aav.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\aav.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\aav.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\aav.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\aav.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aav.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\aav.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\aav.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\aav.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\aav.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\aav.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\aav.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\aav.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\aav.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Advanced Antivirus.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Advanced Antivirus.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\AAVSetup[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\AAVSetup[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\aav.cpl]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aav.cpl]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\aav.cpl]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\aav.cpl]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\aav.cpl]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\aav.cpl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\aav.cpl]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aav.cpl]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\aav.cpl]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\aav.cpl]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\aav.cpl]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\aav.cpl]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\aav.cpl]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\aav.cpl]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\aav.cpl]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\aav.cpl]

Submit Advanced Antivirus To Our Spyware Threat Research Labs

Since Advanced Antivirus spyware components change constantly, you may come across application issues that prevent you from removing Advanced Antivirus completely.

You can report Advanced Antivirus spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem.

We encourage you to post your Support Logs on this article so we can help you come up with a custom fix.

Below are the instructions on how to generate Support Logs using SpyHunter.

Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.

Disclaimer

Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this Advanced Antivirus removal guide. By following any of these Advanced Antivirus removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these Advanced Antivirus removal instructions. We make no guarantees that these Advanced Antivirus removal instructions will completely remove Advanced Antivirus. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.

This entry was posted by Grace Mathews on Friday, June 20th, 2008 at 3:01 pm and is filed under Spyware Alerts. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.

Comments are closed.