Oct 07

Remove Antivirus Action rogue – Antivirus Action removal guide

Rogue Anti-Spyware Add comments

Malware Analysis:

Antivirus Action software is neither safe nor helpful. That’s natural – what can possibly be the use of a rogue anti-spyware program that only tries to harvest some money and does nothing else. Like we mentioned, Antivirus Action is a rogue security solution. It means the tool attempts to make people take it for a real AV application, while it is in fact just an aggressive fake. Antivirus Action can infect your computer when you are on a compromised site and click something there. The hackers who rotate Antivirus Action scam often tend to embed the trojans on adult websites that have lots of traffic. When you get this nasty malware on your PC, it won’t be hard to tell its presence. Antivirus Action will be running scanners that end up reporting that you got some security risks and other malware issues. These scans are phony of course and return false results. But that won’t be all to Antivirus Action’s activity. The rogue will be also generating fake popup alerts that lure you into clicking them. It will also hijack your web browser and keep on diverting it to either spoof warning pages or some fraudulent payment pages like Antisyware.com or Antivirdrome.com. As you must have figured out already, Antivirus Action aims to make you pay for its registration. It tries to achieve that goal by telling you that your computer is not safe and needs some security help. We strongly recommend you remove Antivirus Action infection from your PC without delay.

Determine if your PC is infected with Antivirus Action:

Download Antivirus Action Malware Free Scanner with Remover

Antivirus Action GUI Screenshot:

Antivirus Action

How to remove Antivirus Action manually:

To perform manual removal of Antivirus Action, you should do the following:

Delete Antivirus Action corrupt files:

  • %Documents and Settings%\All Users\Start Menu\Programs\Antivirus Action
  • %Documents and Settings%\All Users\Desktop\Antivirus Action.lnk
  • %Documents and Settings%\All Users\Application Data\Antivirus Action
  • %UserProfile%\Local Settings\Application Data\{random}\{random}agnz.exe

Remove the following associated registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “{local}”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” =
    “http=127.0.0.1:5643″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “{random}”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “{random}”

Please note that manual removal of Antivirus Action is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Antivirus Action Removal Tool

Leave a Reply