RemoveAdware.Com.Au

IE Antivirus

For Information and Removal of IE Antivirus

IE Antivirus = Computer Chaos

If a scan on your computer were to pop up, list several specific infections and tell you that you need to buy an antivirus package immediately, would you type in your credit card number as fast as you could get it out of your pocket or your purse? Most of us would, which is exactly why IE Antivirus works the way it does. They want us to be frightened by the results they present so that we will purchase the full version of the program. You don't want computer chaos, though, so do a bit of reading before you whip out your credit card.

What is IE Antivirus?

Before you start typing in your personal information, you should know a bit about IE Antivirus. Known as a rogue anti-spyware on most internet sites, it works a lot like Malware Bell, Files Secure, and IE Defender. The overall goal of the program is to frighten you into purchasing the full version by falsely alerting you that your computer is infected.

What You Will Notice With IE Antivirus

If IE Antivirus is on your computer, then you will notice some tell-tale symptoms. One of the first symptoms you may find is a notification message in your system tray. The notification message will be similar to a Windows notification message. It will probably suggest your computer has a spyware problem. When you click on the notification, you are directed to a website that tries to convince you to purchase the full version of the program to ‘protect' your computer.

Example of an IE AntiVirus Fake System Error Alert 

Changed internet settings can also be a symptom of IE Antivirus. Your default browser start page may be changed to a new start page. You may even be blocked from changing your start page back to its original setting. Also, you may find that there are new shortcuts on your desktop or in your bookmarks folder. You will find that these new shortcuts direct you to the IE Antivirus site or a similar one.

Altered internet settings are not all that you will find to changed. You may find that you have a new toolbar on your computer. The new toolbar is displays two green bars. One bar says, "block adware," the other says, "remove spyware." If you click on either one of the bars, you are directed to a website in an effort to try to get you to buy their program.

After you have closed the IE Antivirus warning notifications, and your computer sits idle for some time, alert pop-ups may continuously appear on your screen, in your system tray or both.

How IE Antivirus Got There

There are a few very common ways that IE Antivirus can become a part of your computer. One of the most common methods IE Antivirus uses is drive-by installation. While you're visiting an unfamiliar website, IE Antivirus downloads itself without your knowledge or permission. It could have also reached your computer via an email attachment that was unsafe. If you have downloaded any freeware of shareware lately, IE Antivirus could have been bundled with that download. You may or may not have been notified that IE Antivirus would be accompanying your download.

IE Antivirus Removal

If you want your computer to run as smoothly as it did before IE Antivirus was downloaded on your computer, you will want to take the necessary steps to remove it. Many people choose to take the time to go through the steps and manually remove the program themselves. If you plan to take care of the issue yourself, I need to stress that one wrong move can create more chaos than what you began with.

• If you choose to remove the program yourself the first step is to back up your whole system and close all Internet Explorer Windows.

• Step number two is to delete IE Antivirus files with Process Explorer. First you have to download and install Process Explorer. Once it is downloaded, open it and find the following IE Antivirus processes:

-ieavinstaller.exe

-%program_files%ieantivirusieav.exe

-%program_files%ieantivirusuninst.exe

Then right click on each process and choose "Kill Process Tree".

• The third step is to delete IE Antivirus Registry Keys and Values. This is part where you have to be extremely careful. You are working with a critical part of your computer's operating system. In order to do this you will want to do some research to figure out which registry keys are associated with the program. Keep in mind that if you have never worked with your registry before, this is a job you should not handle on your own without expert assistance. Following are the registry files that may need deleting or modification:
  

MicrosoftWindowsCurrentVersionRunantispy

IEAntiVirus 

AppIDksol.dll
AppID{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}
{29BF1B1F-0106-4881-A7C7-A71035C54825}
MicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E4DA88ED-E01E-4D88-ADC4-A3E1ED557C6A}
MS.VideoStream {99E591B6-A5AD-4A2D-B349-334020760EF2}HKEY_CLASSES_ROOTAppID{CF9146DB-16F1-4B79-8DA1-EE14C55D5B06}
HKEY_CLASSES_ROOTAppIDvidas32.dll
HKEY_CLASSES_ROOTCLSID{CF9146DB-16F1-4B79-8DA1-EE14C55D5B06}HKEY_CLASSES_ROOTvideo.BHO HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{F856BB9E-855B-498D-883E-3509C550A031}
WindowsCurrentVersionExplorerBrowser Helper Objects{CF9146DB-16F1-4B79-8DA1- EE14C55D5B06}

   IEAntiVirus3.2 
  

HKEY_CLASSES_ROOTAppID{21BC9DFA-3E14-4753-9CBD-16A009AE1144}
HKEY_CLASSES_ROOTAppID{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}

HKEY_CLASSES_ROOTAppIDfop32.dll
HKEY_CLASSES_ROOTAppIDiebho.dll

HKEY_CLASSES_ROOTCLSID{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}
HKEY_CLASSES_ROOTCLSID{21BC9DFA-3E14-4753-9CBD-16A009AE1144}

HKEY_CLASSES_ROOTiebho.BHO
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{597AED5A-2DEA-431D-BE7E-F03BAB2AFB15}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{21BC9DFA-3E14-4753-9CBD-16A009AE1144}
iebho.BHO
iebho.dll
{DD556A76-A85E-4606-9239-40A8B9FC4ECB}
{09A26406-041E-4FF5-9A88-0574721445B4}
WindowsCurrentVersionExplorerBrowser Helper Objects{09A26406-041E-4FF5-9A88-0574721445B4}
WindowsCurrentVersionExplorerBrowser Helper Objects{7445DC17-44B7-4818-A9CB-2BC24E67E8D7}
WindowsCurrentVersionExplorerBrowser Helper Objects{45245B53-72FB-46CA-B5F5-ABA01D9B8E51}
WindowsCurrentVersionExplorerBrowser Helper Objects{616D534C-3CA8-43AB-B439-618F850F1D2B}
WindowsCurrentVersionExplorerBrowser Helper Objects{AC16362B-5EDF-4E46-B7F6-EC24BB76E8C4}
WindowsCurrentVersionExplorerBrowser Helper Objects{DD556A76-A85E-4606-9239-40A8B9FC4ECB}
WindowsCurrentVersionExplorerBrowser Helper Objects{FD36BBE5-1AF4-47D3-8681-2214DD85E152}

• Step number four in the manual removal process is to delete the files and directories created by IE Antivirus. It is important that you learn and understand the steps before you get started.

ANTIVIRUS.exe
apsagy.dll
apsaps.dll
apsaxu.dll
apunbeps.dll
IE AntiVirus 3.2.lnk
ieav.db2
ieav.db3
ieav.exe
iebho.dll
iksagy.dll
iksaps.dll
konsal.dll
ksol.dll
odsaxu.dll
odunbegy.dll
pnas16.dll
unopus.dll
vidas32.dll
vidk32.dll
zorad.dll

• The last two steps are restoring your default home page and removing the IE Antivirus icons. To restore your homepage go to "Start," then "Control Panel," and finally, "Internet Options". Next click on the "General" tab, then "Use Default" button under home page. Click "Apply," and "OK". To remove the IE Antivirus shortcuts, you can simply drag them into the recycle bin. It is important to reboot your computer after completing these steps so that you can see if your methods were effective.

If you do not feel comfortable manually removing IE Antivirus, or if they were unsuccessful, the best thing to do is purchase a reliable anti spyware program. Malwarebytes Anti-Malware (Malwarebytes has free malware removal) is a good one for removing IE Antivirus. Download, install, and scan your computer. Programs like IE Antivirus will be eliminated forever with regular updates and scans.

Removing IE Antivirus Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of IE Antivirus and any hidden Trojans. As a precaution we recommend double checking your system with Spyware Doctor. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Remove IE Antivirus Now:

1. Download and install Malwarebytes Anti-Malware and Spyware Doctor  
2. Run a scan with Malwarebytes Anti-Malware.
3. Remove all the detected infections (free).
4. Run a scan with Spyware Doctor
5. Remove any remaining infections
6. Reboot and rescan with Spyware Doctor. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing IE Antivirus please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.

All content copyright 2006-2012, Bonobo Pty Limited. All Rights Reserved.
Privacy Policy | Terms Of Service