AntiVira Av

AntiVira Av Description

Type: Rogue Anti-Virus Program

ScreenshotAntiVira Av is a rogue anti-virus application, and it is a clone of Antivirus .NET. This means that AntiVira Av is entirely malicious and completely incapable of actually scanning for or removing viruses. With the exception of a few superficial differences, AntiVira Av behaves like any other rogue security application.

AntiVira Av's Redirections

Aside from AntiVira Av's name, the key difference between AntiVira Av and Antivirus. Net is that each one is promoted by a different malicious website. This website pretends to be the payment page for the software, and it is capable of processing credit card payments in order to defraud the users of infected computers. AntiVira Av is associated with the site Shopllbo.com – and, please remember, you should not visit that site under any circumstances. One of the symptoms of an infection of AntiVira Av is that you will find your browser constantly redirecting you to Shopllbo.com; so if you find that you keep winding up on that site, AntiVira Av is definitely on your computer.

AntiVira Av will alter the system registry so that it runs on startup. Every time AntiVira Av runs at startup, it will show a fake user interface and run a fake virus scan. This scan always turns up results, no matter what, and it will tell you that the viruses it found cannot be removed unless you purchase a license for AntiVira Av. One of the noteworthy characteristics of rogue anti-virus programs in the Antivirus. Net family is that the list of viruses in the bogus scan results will include the names of real viruses, in order to make the list more convincing and frightening. However, if you try to locate these viruses on your computer, they will not be there; AntiVira Av turns up lists of infections that are predetermined, since it can't actually scan for anything.

Rogue security programs in this family also tend to generate a lot of pop-up alerts, which will typically warn of serious threats that have been detected, or remote attacks that have been detected. These warning messages always prompt you to “activate” your bogus anti-virus software, and if you follow the prompts, you will wind up at the fake payment site – in this case, Shopllbo.com.

AntiVira Av may prevent you from opening any other program, including Task Manager, and will prevent you from removing the malware when Windows is in its normal mode. The intention of the con-artists who created this fake anti-virus software is to hold your computer hostage and to get you to think that the only way to take back your computer is to pay the money they demand. If you do pay the money, nothing changes. AntiVira Av will continue to behave in exactly the same way it did before, and will continue to be malicious for as long as it is present. The only solution is to remove AntiVira Av, and you don't have to pay the crooks in order to do that.

How to Prevent AntiVira AV

The best protection against AntiVira Av is to use good, current anti-virus software. AntiVira Av relies on Trojans in order to infiltrate victim computers, and these Trojans can be hidden in downloads that look harmless, like video codecs or browser plugins. AntiVira Av may also manipulate the way that its malicious sites show up in search results, so that search engines will put links at the top of the results list that aren't really pages at all, but are sites that redirect or link to a site that hosts or promotes AntiVira Av.

Remember when dealing with AntiVira Av (or any other malware) that preventing infections will avoid a lot of problems, and you don't ever have to pay money to anyone who tries to take your computer hostage.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Information

Screenshots & Other Imagery

AntiVira Av Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

AntiVira Av creates the following file(s):
# File Name MD5 Detection Count
1 wsnablnsika.exe 0d7ec3a7d0a275c4a624d228101634e7 2

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

8 Comments

  • Mich:

    I fell like a sucker to this Antivira Av scam.

  • Edwin P.:

    These rogue programs are no different than the muggers that wait in the dark alley to jump you and steal your wallet or purse.

  • Jim:

    I keep getting redirected to Softwarean.net! Please I need help. I don't know how to make it stop. A dumbed down explanation will be deeply appreciated.

    • GoldSparrow:

      Hello Jim,

      The reason that you are being redirected to Softwarean.net, and may not be able to normally surf the web, is because Softwarean.net may have installed malicious code on your system. This code may manipulate the settings in your web browser. To restore normal function to your web browser you may need to go into the "Internet options" and un-check "Use a proxy server for your LAN" within the "Connections" tab.

      1. Start Internet Explorer and click on the "Tools" menu then click on "Internet Options".

      2. Select the "Connections" tab and click on "LAN Settings…".

      3. Un-check the box next to "Use a proxy server for your LAN" and then click OK.

      In addition, you may want to scan your system to detect any malware threats that initially caused this to happen. You can read more about the Softwarean.net browser hijacker site at: http://www.enigmasoftware.com/softwareannet-removal/

  • Paul Flaschner:

    I still can't remove Antivira Av. I think my only option is to reformat :(.

  • Tina:

    I can't connect to the Internet because of Antivira AV. I had to go to a different computer in order to search for a solution. Can someone please help me?

    • Billy:

      pay the price and download "Spyhunter". If you have trouble running it you will have to go into the registry to make changes. Use another computer to get the registry changes from Spyhunter site. My version of Malwarebytes did not detect it.

  • JZ:

    I got SpyHunter because of AntiVira AV which i picked up while downloading a music file on 4Shared.com. AntiVira shuts down all your anti virus software, throws up all kinds of bogus error messages, pop ups, and even tries to shut down Task Manager. I was able to get Task Manager to stay up just long enough for me to kill the av.exe file and then downloaded SpyHunter which I am happy to say seems to have gotten the damn thing off my PC. I've steered clear of 4Shared ever since...