
By Jim
Updated on Monday, October 18th, 2010
When you’re surfing on the Internet nowadays, you need to be a bit wary. This is because of the many hidden dangers that can spell trouble for you and your computer. One of the foremost problems that you are probably going to encounter is malware. If you aren’t careful, these pieces of rogue software can sneak into your system and give you headaches until you manage to remove them.
A good example of the typical malware program nowadays is Antivirus IS. What it does is execute fake “virus” scans and send you fake “alerts” telling you that your computer is infected with a large amount of “viruses”. It then offers to clean all these “viruses” off of your PC, if you pay a simple fee of $90. You don’t need me to tell you that the price is exorbitant when you can easily check and see that legitimate antiviruses cost $50 at most.
However, that’s just the beginning – Antivirus IS will also stop other antivirus programs you have from working. This program will also hijack your browser and constantly send you messages that you’re browsing unsafely. It will also block you from any processes that will help you remove it from your system like the registry editor, task manager and system restore.
As you can see, this piece of scareware is definite troublemaker. To find out how to remove it from your system, you’ll have to read on.

- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove Antivirus IS
Remove Antivirus IS In Minutes With an Automatic Removal Tool.
Simply Click “Start Download Now!” to Begin!

Symptoms Of Infection
- Your computer is acting slow. Antivirus IS slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Antivirus IS infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Antivirus IS infection.
Dangers Of Infection
Viruses like Antivirus IS will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
![]()
Some Antivirus IS infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Antivirus IS Processes
Delete Antivirus IS Files
%UserProfile%\Local Settings\Application Data\{random}\{random}.exe
%UserProfile%\AppData\Local\[SET OF RANDOM CHARACTERS]
Where %UserProfile% is either C:\Documents and Settings\[UserName] or C:\Users\[UserName]
Remove Antivirus IS Registry Files
HKEY_CURRENT_USER\Software\wnxmal
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:6522″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache “%UserProfile%\Desktop\flash_player_installer\flash_player_installer.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” =”1″
Popular Search Terms
Remove Antivirus IS
Delete Antivirus IS
Uninstall Antivirus IS
How to get rid of Antivirus IS
How to remove Antivirus IS
Antivirus IS removal
Remove AntivirusIS
AntivirusIS removal
Antivirus-IS
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Posted under Fake Antispyware | No Comments
