written by: Donna Buenaventura•edited by: Lamar Stonecypher•updated: 7/6/2011
Antivirus Plus is a rogue security program that is installed without user consent. Like many scareware and rogue security programs, Antivirus Plus is distributed when you visited fake scanner websites or websites that re-direct to fake scanners.
slide 1 of 2
How to Remove Antivirus Plus?
If you are infected with Antivirus Plus and could not run your antivirus program or the access to your AV is blocked by Antivirus Plus, you should remove it using the steps below:
Download Rkill.exe and use it to automatically end the running processes of Antivirus Plus. Do not reboot the computer when Rkill has finished in shutting down the malicious processes. (Also see my How to use Rkill article.)
Next, download SmitFraudFix or any trustworthy malware and rogue remover program such as Windows Defender, Malwarebytes’ Anti-Malware, A-squared Free, SUPERAntispyware or Ad-Aware, Spybot – S&D. If any of these programs is installed already, you should be able to use it to scan the system, after running rkill. Be sure to update the database before running a scan.
slide 2 of 2
Manually Remove Antivirus Plus
If the above method will not help to remove Antivirus Plus, your next step is to manually remove the offending scareware program:
Note: Only use below step if you are comfortable in using the HijackThis tool.
Download Rkill.exe and use it to automatically end the running processes of Antivirus Plus. Do not reboot the computer when Rkill has finished in shutting down the malicious processes.
Download HijackThis tool and run it to scan the system. Put a checkmark on the following items in the HijackThis window (if any exists that was added by Antivirus Plus on the system), click “Fix checked" button, close HijackThis when done and reboot the computer:
O4 - Global Startup: AntiVirus Plus.lnk = C:\WINDOWS\system32\rundll32.exe
After rebooting the PC, run a scan using an up-to-date anti-malware scanner. This is an important step because the above manual removal method will only try to remove one scareware program. You might have a Trojan or any other malware that caused the infection.
If any of the above method will not help, or you are not comfortable in using a self-help guide, you should proceed to visiting the malware removal forum, offering a free malware removal with the help of volunteers.