Windows Vista Blog

Article source from this Personal Antivirus Removal guide

Personal Antivirus is one of the bad strains making the rounds right now.  While this fake security product is not all that hard to remove the other trojans that come down with this thing are VERY HARD TO REMOVE. In our latest test we infected a PC with this but we were also infected with a Desktop Highjacker that changed our wall paper around, disabled system restore, disabled the task manager and blocked several popular security websites.  We also got the normal re-directs and fake virus warnings.

If you are infected with Personal Antivirus you do need to take action right away before matters get worse.  Be sure to run a full scan using your favorite antivirus and antispyware client.  If you do not have one then we recommend you download a copy of Spyware Doctor with Antivirus here.  It’s one of the better clients out there for this type of infection.

Some symptoms of personal Antivirus:

* Bogus Scan results
* Auto Scans on Start-up
* Warning coming out of a fake shield in the system tray
* pop-ups and re-directs to the fake software’s website
* constant warnings of being infected as well as false statements of other trojans

Here is what personal Antivirus may look like

We do recommend you scan your computer with the free trial of Spyware Doctor with Antivirus to see how infected you really are. If it is just this fake security product then follow the manual directions below. If you have other trojans and spyware applications then consider making a purchase of Spyware Doctor with Antivirus Here to remove all other threats and to keep your PC secure. If you follow the link above and use coupon code removevirus10 you will get 10% off. This is an exclusive coupon we got just for our readers.

As well we do recommend this remote computer support company. They are the leaders in remote computer repair and can have you up and going in no time at all. This option is more for people who don’t feel comfortable removing viruses by themselves and just want an expert to do it for them.

Manual removal instructions for Personal Antivirus ( Please read our disclaimer bellow )

Kill processes:

• pav.exe
• PerAvir.exe
• services.exe
• unins000.exe
• winlogon.exe and iv.exe ( if running )

Delete registry values:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Delete files:

• pav.exe
• Uninstall Personal Antivirus.lnk
• c:\Program Files\Personal Antivirus\activate.ico
• c:\Program Files\Personal Antivirus\Explorer.ico
• c:\Program Files\Personal Antivirus\PerAvir.exe
• c:\Program Files\Personal Antivirus\unins000.dat
• c:\Program Files\Personal Antivirus\uninstall.ico
• c:\Program Files\Personal Antivirus\working.log
• c:\Program Files\Personal Antivirus\db
• c:\Program Files\Personal Antivirus\db\DBInfo.ver
• c:\Program Files\Personal Antivirus\db\ia080614.db
• c:\Program Files\Personal Antivirus\db\ia080618x.db
• c:\Program Files\Personal Antivirus\Languages
• c:\Program Files\Personal Antivirus\Languages\IAEs.lng
• c:\Program Files\Personal Antivirus\Languages\IAFr.lng
• c:\Program Files\Personal Antivirus\Languages\IAGer.lng
• c:\Program Files\Personal Antivirus\Languages\IAIt.lng
• %UserProfile%\Application Data\Personal Antivirus\settings.ini
• %UserProfile%\Application Data\Personal Antivirus\uill.ini
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus\db
• %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
• %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
• %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Delete directories:

• c:\Program Files\Personal Antivirus\