print version

IE Antivirus

ParetoLogic's XoftSpySE is our best recommendation for a safe and reliable method to remove IE Antivirus. ParetoLogic is a member of the Better Business Bureau and the Software & Information Association, so you can be sure of their ethicacy and ability to resolve your IE Antivirus problem:

XoftSpySE Website           Download XoftSpySE

IE Antivirus = Computer Chaos

If a scan on your computer were to pop up, list several specific infections and tell you that you need to buy an antivirus package immediately, would you type in your credit card number as fast as you could get it out of your pocket or your purse? Most of us would, which is exactly why IE Antivirus works the way it does. They want us to be frightened by the results they present so that we will purchase the full version of the program. You don't want computer chaos, though, so do a bit of reading before you whip out your credit card.

What is IE Antivirus?

Before you start typing in your personal information, you should know a bit about IE Antivirus. Known as a rogue anti-spyware on most internet sites, it works a lot like Malware Bell, Files Secure, and IE Defender. The overall goal of the program is to frighten you into purchasing the full version by falsely alerting you that your computer is infected.

What You Will Notice With IE Antivirus

If IE Antivirus is on your computer, then you will notice some tell-tale symptoms. One of the first symptoms you may find is a notification message in your system tray. The notification message will be similar to a Windows notification message. It will probably suggest your computer has a spyware problem. When you click on the notification, you are directed to a website that tries to convince you to purchase the full version of the program to ‘protect' your computer.

Example of an IE AntiVirus Fake System Error Alert 

Changed internet settings can also be a symptom of IE Antivirus. Your default browser start page may be changed to a new start page. You may even be blocked from changing your start page back to its original setting. Also, you may find that there are new shortcuts on your desktop or in your bookmarks folder. You will find that these new shortcuts direct you to the IE Antivirus site or a similar one.

Altered internet settings are not all that you will find to changed. You may find that you have a new toolbar on your computer. The new toolbar is displays two green bars. One bar says, "block adware," the other says, "remove spyware." If you click on either one of the bars, you are directed to a website in an effort to try to get you to buy their program.

After you have closed the IE Antivirus warning notifications, and your computer sits idle for some time, alert pop-ups may continuously appear on your screen, in your system tray or both.

How IE Antivirus Got There

There are a few very common ways that IE Antivirus can become a part of your computer. One of the most common methods IE Antivirus uses is drive-by installation. While you're visiting an unfamiliar website, IE Antivirus downloads itself without your knowledge or permission. It could have also reached your computer via an email attachment that was unsafe. If you have downloaded any freeware of shareware lately, IE Antivirus could have been bundled with that download. You may or may not have been notified that IE Antivirus would be accompanying your download.

IE Antivirus Removal

If you want your computer to run as smoothly as it did before IE Antivirus was downloaded on your computer, you will want to take the necessary steps to remove it. Many people choose to take the time to go through the steps and manually remove the program themselves. If you plan to take care of the issue yourself, I need to stress that one wrong move can create more chaos than what you began with.

• If you choose to remove the program yourself the first step is to back up your whole system and close all Internet Explorer Windows.

• Step number two is to delete IE Antivirus files with Process Explorer. First you have to download and install Process Explorer. Once it is downloaded, open it and find the following IE Antivirus processes:

-ieavinstaller.exe

-%program_files%ieantivirusieav.exe

-%program_files%ieantivirusuninst.exe

Then right click on each process and choose "Kill Process Tree".

• The third step is to delete IE Antivirus Registry Keys and Values. This is part where you have to be extremely careful. You are working with a critical part of your computer's operating system. In order to do this you will want to do some research to figure out which registry keys are associated with the program. Keep in mind that if you have never worked with your registry before, this is a job you should not handle on your own without expert assistance. Following are the registry files that may need deleting or modification:
  

MicrosoftWindowsCurrentVersionRunantispy

IEAntiVirus 

AppIDksol.dll
AppID{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}
{29BF1B1F-0106-4881-A7C7-A71035C54825}
MicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}
MS.VideoStream {99E591B6-A5AD-4A2D-B349-334020760EF2}HKEY_CLASSES_ROOTAppID{CF9146DB-16F1-4B79-8DA1-EE14C55D5B06}
HKEY_CLASSES_ROOTAppIDvidas32.dll
HKEY_CLASSES_ROOTCLSID{CF9146DB-16F1-4B79-8DA1-EE14C55D5B06}HKEY_CLASSES_ROOTvideo.BHO HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F856BB9E-855B-498D-883E-3509C550A031}
WindowsCurrentVersionExplorerBrowser Helper Objects{CF9146DB-16F1-4B79-8DA1- EE14C55D5B06}

   IEAntiVirus3.2 
  

HKEY_CLASSES_ROOTAppID{21BC9DFA-3E14-4753-9CBD-16A009AE1144}
HKEY_CLASSES_ROOTAppID{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}

HKEY_CLASSES_ROOTAppIDfop32.dll
HKEY_CLASSES_ROOTAppIDiebho.dll

HKEY_CLASSES_ROOTCLSID{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}
HKEY_CLASSES_ROOTCLSID{21BC9DFA-3E14-4753-9CBD-16A009AE1144}

HKEY_CLASSES_ROOTiebho.BHO
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{21BC9DFA-3E14-4753-9CBD-16A009AE1144}
iebho.BHO
iebho.dll
{DD556A76-A85E-4606-9239-40A8B9FC4ECB}
{09A26406-041E-4FF5-9A88-0574721445B4}
WindowsCurrentVersionExplorerBrowser Helper Objects{09A26406-041E-4FF5-9A88-0574721445B4}
WindowsCurrentVersionExplorerBrowser Helper Objects{7445DC17-44B7-4818-A9CB-2BC24E67E8D7}
WindowsCurrentVersionExplorerBrowser Helper Objects{45245B53-72FB-46CA-B5F5-ABA01D9B8E51}
WindowsCurrentVersionExplorerBrowser Helper Objects{616D534C-3CA8-43AB-B439-618F850F1D2B}
WindowsCurrentVersionExplorerBrowser Helper Objects{AC16362B-5EDF-4E46-B7F6-EC24BB76E8C4}
WindowsCurrentVersionExplorerBrowser Helper Objects{DD556A76-A85E-4606-9239-40A8B9FC4ECB}
WindowsCurrentVersionExplorerBrowser Helper Objects{FD36BBE5-1AF4-47D3-8681-2214DD85E152}

• Step number four in the manual removal process is to delete the files and directories created by IE Antivirus. It is important that you learn and understand the steps before you get started.

ANTIVIRUS.exe
apsagy.dll
apsaps.dll
apsaxu.dll
apunbeps.dll
IE AntiVirus 3.2.lnk
ieav.db2
ieav.db3
ieav.exe
iebho.dll
iksagy.dll
iksaps.dll
konsal.dll
ksol.dll
odsaxu.dll
odunbegy.dll
pnas16.dll
unopus.dll
vidas32.dll
vidk32.dll
zorad.dll

• The last two steps are restoring your default home page and removing the IE Antivirus icons. To restore your homepage go to "Start," then "Control Panel," and finally, "Internet Options". Next click on the "General" tab, then "Use Default" button under home page. Click "Apply," and "OK". To remove the IE Antivirus shortcuts, you can simply drag them into the recycle bin. It is important to reboot your computer after completing these steps so that you can see if your methods were effective.

If you do not feel comfortable manually removing IE Antivirus, or if they were unsuccessful, the best thing to do is purchase a reliable anti spyware program. ParetoLogic's XoftSpySE is a good one for removing IE Antivirus. Download, install, and scan your computer. Programs like IE Antivirus will be eliminated forever with regular updates and scans.

Occasionally new variants are released to thwart antispyware programs. If you require personal assistance removing IE Antivirus please email your log file for analysis by using the Backup List button in XoftSpySE. Otherwise use the Help button in XoftSpySE to contact ParetoLogic support directly.

This webpage was setup to provide information on IE Antivirus removal. We do not own or endorse IE Antivirus.

 to top