<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Emsisoft New Malware Blog &#187; Antivirus7</title>
	<atom:link href="http://www.anti-malware-blog.com/tag/antivirus7/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.anti-malware-blog.com</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Wed, 25 Jan 2012 06:47:18 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Antivirus7 Adware Removal Instructions</title>
		<link>http://www.anti-malware-blog.com/2010/03/13/antivirus7-adware-removal-instructions/</link>
		<comments>http://www.anti-malware-blog.com/2010/03/13/antivirus7-adware-removal-instructions/#comments</comments>
		<pubDate>Fri, 12 Mar 2010 23:11:17 +0000</pubDate>
		<dc:creator>emsi</dc:creator>
				<category><![CDATA[Malware Alerts]]></category>
		<category><![CDATA[Removal Help]]></category>
		<category><![CDATA[Antivirus7]]></category>
		<category><![CDATA[Rogue]]></category>

		<guid isPermaLink="false">http://www.anti-malware-blog.com/?p=763</guid>
		<description><![CDATA[The Emsi Software malware research team has discoverd a new outbreak of the Antivirus7 adware. a-squared Anti-Malware detects this malware as Adware.Win32.Antivirus7. Antivirus7 is a rogue security program clone of FakeAntivir, which is also a rogue application that has become widespread.  A rogue application tries to trick you by displaying false positive/misleading scan results report, [...]]]></description>
			<content:encoded><![CDATA[<p>The <strong>Emsi Software</strong> malware research team has       discoverd a new outbreak           of the <strong>Antivirus7 </strong>adware.   <strong><a href="http://www.emsisoft.com/en/software/antimalware/">a-squared                 Anti-Malware</a></strong> detects this malware as <a href="http://www.emsisoft.com/en/malware/?Adware.Win32.Antivirus7" target="_blank"><strong>Adware.Win32.</strong><strong>Antivirus7</strong></a>.</p>
<p><strong>Antivirus7</strong> is a rogue security program clone of <strong><a href="http://www.emsisoft.com/en/malware/?Adware.Win32.FakeAntivir" target="_blank">FakeAntivir</a></strong>, which is also a rogue  application that has become widespread.  A rogue   application       tries to trick you  by displaying  false     positive/misleading  scan      results  report, which  says that your      computer is infected with       viruses or  trojan, but you  will not be     able  to delete them  before you      purchase.</p>
<p><strong>Create new files:</strong></p>
<ul>
<li>%ProgramFiles%\AV7\antivirus7.exe</li>
<li>%SystemRoot%\system32\UpdateExplorer.dll</li>
<li>%AllUsersProfile%\Start Menu\AV7\Antivirus7.lnk</li>
<li>%AllUsersProfile%\Start Menu\AV7\Uninstall.lnk</li>
</ul>
<p><strong>Create new registry entries:</strong></p>
<ul>
<li>HKEY_LOCAL_MACHINE\software\Classes\clsid\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}</li>
<li>HKEY_LOCAL_MACHINE\software\Classes\clsid\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}\InprocServer32</li>
<li>HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E2BFE352-A303-4EA8-88FE-CE35361D7E8B}</li>
<li>HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run, &#8220;AV7&#8243;</li>
</ul>
<p><strong>Screenshots:</strong></p>
<p><a href="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_5.png"><img class="alignnone size-medium wp-image-767" title="Adware.Win32.Antivirus7" src="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_5-400x240.png" alt="" width="400" height="240" /></a></p>
<p><a href="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_2.png"><img class="alignnone size-medium wp-image-764" title="Adware.Win32.Antivirus7" src="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_2-400x278.png" alt="" width="400" height="278" /></a></p>
<p><a href="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_3.png"><img class="alignnone size-medium wp-image-765" title="Adware.Win32.Antivirus7" src="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_3-400x240.png" alt="" width="400" height="240" /></a></p>
<p><a href="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_4.png"><img class="alignnone size-medium wp-image-766" title="Adware.Win32.Antivirus7" src="http://www.anti-malware-blog.com/wp-content/uploads/2010/03/Adware.Win32.Antivirus7_4-400x310.png" alt="" width="400" height="310" /></a></p>
<p><strong>How to remove the infection of Antivirus7</strong><strong> </strong><strong>(Adware.Win32.</strong><strong>Antivirus7</strong><strong>)?</strong></p>
<p>To delete this malware infection, please download and install <strong><a href="http://www.emsisoft.com/en/software/antimalware/">a-squared                 Anti-Malware</a></strong>. Run a full scan on all drives and    move     all detected          items to the quarantine.</p>
<div id="crp_related"><h3>Related Posts:</h3><ul><li><a href="http://www.anti-malware-blog.com/2010/07/07/antivirusgt-adware-removal-instructions/" rel="bookmark" class="crp_title">AntivirusGT Adware Removal Instructions</a></li><li><a href="http://www.anti-malware-blog.com/2010/03/11/smart-security-adware-removal-instructions/" rel="bookmark" class="crp_title">Smart Security Adware Removal Instructions</a></li><li><a href="http://www.anti-malware-blog.com/2010/05/07/akm-antivirus-2010-pro-adware-removal-instructions/" rel="bookmark" class="crp_title">AKM Antivirus 2010 Pro Adware Removal Instructions</a></li><li><a href="http://www.anti-malware-blog.com/2010/12/16/pcoptimizer-2010-adware-removal-instructions/" rel="bookmark" class="crp_title">PCoptimizer 2010 Adware Removal Instructions</a></li><li><a href="http://www.anti-malware-blog.com/2010/12/10/privacyguard-2010-adware-removal-instructions/" rel="bookmark" class="crp_title">PrivacyGuard 2010 Adware Removal Instructions</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://www.anti-malware-blog.com/2010/03/13/antivirus7-adware-removal-instructions/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

