AnVi Description

Type: Rogue Anti-Virus Program

ScreenshotAnVi is a rogue anti-virus program and another member of the infamous FakeCog (CoreGuard) family. On infiltrating a system, AnVi will fabricate numerous security alerts and warnings in order to scare a victim into purchasing AnVi as a remedy. AnVi may also redirect the browser to malicious websites that further promote the rogueware. AnVi is a useless application that can neither detect nor remove legitimate computer threats.

AnVi is known as a rogue antivirus application because AnVi is not capable of detecting or eliminating viruses from the computer. In other words, AnVi will not secure your computer. AnVi falls under the same characteristics as its many clones that include PC Protection Center 2008, Protection System, CoreGuard Antivirus 2009, Paladin Antivirus, Dr.Guard, User Protection, Your Protection, Digital Protection, Data Protection, Protection Center, Defense Center, PC Protection Center, Virus.DOS.RogueAntiSpyware, Fraud.Defense Center, Malware Protection Center, Adware.PCProtectionCenter.ScreenshotScreenshotScreenshotScreenshot


13 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Sophos Mal/Generic-L
NOD32 probably a variant of Win32/Adware.CoreguardAntivi
Microsoft Trojan:Win32/Neop
eSafe Win32.TRDldr.FraudLo
CAT-QuickHeal TrojanDownloader.FraudLoad.xe
Antiy-AVL Trojan/Win32.FraudLoad.gen
Ikarus 3399764 'Trojan-Downloader.Win32.FraudLoad
Symantec CoreGuardAntivirus2009
Panda Adware/SecurityCenter
McAfee Generic FakeAlert.b
Kaspersky Trojan-Downloader.Win32.FraudLoad.xerf
Ikarus Trojan-Downloader.Win32.FraudLoad
Comodo Heur.Suspicious

Technical Information

Screenshots & Other Imagery

SpyHunter Detects & Remove AnVi

File System Details

AnVi creates the following file(s):
# File Name MD5 Detection Count
1 avt.exe 0946f37b8305732b085a53c9413bfceb 45
2 Endermanch@Antivirus.exe c7e9746b1b039b8bd1106bca3038c38f 31
3 wmsdk64_32.exe 64afb86f0f09bffd581b7458b1a3e4d1 1
4 expand32xp.dll fd109e252ae0a84ca951605a683c10d9 0
5 avthook.dll 82dcde33d5c7f8ce87c45a35374a042b 0
More files

Registry Details

AnVi creates the following registry entry or registry entries:

Related Posts

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.