Contact me

Do comment in the comment section on how useful were the removal methods.

This will encourage me to post more removal methods.

Tuesday, July 8, 2008

Remove IE Antivirus Spyware

This is one of the common spywares infecting systems around the world. When people reach these websites, they are made to believe that there systems are full of viruses, trojans & spywares and therefore they need to delete these viruses. Reading this people download and install the fake SPYWARE antivirus program and are thus infected with this spyware.
Remember its a SCAM and the spyware will ask you to buy the software online and take you to a website (Like this one)
Am I Infected
If a window like this troubles you each time you start windows and while you are working, with title IE Antivirus, then you are infected with this spyware and need to remove it as soon as possible.
Removal Steps
Follow the following steps to remove it

1. Open windows task manager(Ctrl+Alt+Del). Go to Processes Tab. Find the image name antivir.exe and highlight it. Next kill the process by clicking end process. Click yes on task manager warning.


2. Next go to control panel and Open Add remove programs. Find IE Antivirus and remove it. It will say the program looks to be already uninstalled but its not so.
3. Now go to C:\Program Files(assuming that you have windows in C drive) and delete the folder named IEAntiVirus.


You have deleted the spyware except that its to be removed from registry.
(Registry editing is dangerous and improper editing could lead to system crash) Please follow the following instructions very carefully otherwise can lead to system instability.
4. Go start menu-> Run-> type 'regedit' without commas-> press enter

5.Now in the left menu go to the following key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
On the right side spot antispy and delete it

6. Now go to
HKEY_CURRENT_USER\Software\IEAntiVirus
And delete the key 'IEAntivirus' by right clicking on it and selecting delete.


You have cleaned the Spyware from your system.

No comments: