Remove Antivirus .NET (Uninstall Guide)

What this infection does:

Antivirus .NET is a rogue anti-spyware program from the same family as Antivirus Scan . When this infection is installed on your computer it will be configured to start automatically. Once started it will scan your computer and list numerous infections in the scan results. If you attempt to remove any of these so-called infections it will state that you first need to purchase the program in order to remove anything. As these scan results are all fake, please do not purchase this program based upon anything it states.

 

Antivirus .Net Antivirus .Net Antivirus .Net Antivirus .Net

To protect itself, Antivirus .NET will terminate most executables that you attempt to run. It does this to prevent you from running any security applications that may be able to remove the infection. When the rogue terminates the program it will display an alert stating that the program is infected. The text of this alert is:

Security Warning
Application cannot be executed. The file defrag.exe is infected. Do you want to activate your antivirus software now?

This alert should be ignored as the files you are attempting are not actually infected.

While running, Antivirus .NET will also display fake security alerts on your computer. These security alerts are used to make you think that there are various security problems on your computer. The text of some of these alerts include:

Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Antivirus software alert
Infiltration alert
Your computer is being attacked by an Internet virus. It could be password-stealing attack, a trojan-dropper or similar.

Antivirus .NET will also configure your computer to use a proxy server so that it hijackthis your web browser to display warnings when you browse the web. This warning is:

Internet Explorer Warning - visiting this web site may harm your computer!
Most likely causes:
- The website contains exploits that can launch a malicious code on your computer
- Suspicious network activity detected
- There might be an active spyware running on your computer

Just like the fake scan results, these fake alerts and browser hijack messages are just another tactic to have you purchase the program.

As you can see, the warnings issued by this program are all fake, and once you realize that, the alerts become more of a nuisance rather than a concern. Therefore, do not purchase Antivirus .NET for any reason, and if you already have, please contact your credit card company and state that the program is a computer infection and a scam and that you would like to dispute the charge. To remove this infection and related malware, please follow the steps in the guide below.

 

Associated Antivirus .NET Files:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http=127.0.0.1:8992
O4 - HKCU\..\Run: [] %Temp%\\<random>.exe

File Location Notes:

%Temp% refers to the Windows Temp folder. By default, this is C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\ProfileName\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\ProfileName\AppData\Local\Temp for Windows Vista and Windows 7.

 

Associated Antivirus .NET Windows Registry Information:

HKEY_CURRENT_USER\Software\<random>
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:8992'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'


Antivirus .NET Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove Antivirus .NET Processes

Remove the "Antivirus .NET" processes files:

Read more on How to kill Antivirus .NET Processes

Step 2 : Use Registry Editor to Remove Antivirus .NET Registry Values

Locate and delete "Antivirus .NET" registry entries:

Read more on How to Remove Antivirus .NET Registry Entries

Step 3 : Detect and Delete Other Antivirus .NET Files

Remove the "Antivirus .NET" processes files:

Read more on How to Delete Harmful Files

If this doesn't solve your problem, then use a trusted antivirus package