Comments on: Advanced Virus Remover http://www.411-spyware.com/remove-advanced-virus-remover 411-Spyware.com Sun, 22 Nov 2009 20:58:11 -0600 http://wordpress.org/?v=2.8.5 hourly 1 By: Eldan http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36310 Eldan Sun, 22 Nov 2009 20:58:11 +0000 http://www.411-spyware.com/?p=4694#comment-36310 Correct. I've tried everything and now just had to use the Operating System disc that was shipped with my laptop. I am just waiting to finish the process and see what will happen. Correct. I’ve tried everything and now just had to use the Operating System disc that was shipped with my laptop. I am just waiting to finish the process and see what will happen.

]]> By: rex http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36296 rex Sat, 21 Nov 2009 04:32:18 +0000 http://www.411-spyware.com/?p=4694#comment-36296 Just restore your computer with the Restore Disc's that came with your computer. There is no one that actually knows how to remove this VIRUS! Just a whole lot of talk and false promises, I have tried a lot of the suggestions on the Web to no avail and was left with the option of a complete restore. Just restore your computer with the Restore Disc’s that came with your computer. There is no one that actually knows how to remove this VIRUS! Just a whole lot of talk and false promises, I have tried a lot of the suggestions on the Web to no avail and was left with the option of a complete restore.

]]> By: razzendahcuben http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36276 razzendahcuben Wed, 18 Nov 2009 19:15:11 +0000 http://www.411-spyware.com/?p=4694#comment-36276 Most of my attempts to implement the suggestions on this web page or the comments section failed. Finally I had to analyze the processes with ProcMon. Turns out that the culprit is "winupdate86.exe". I had to download a separate task manager-style program (a freeware called Process Killer) to kill winupdate86.exe. Then I went into the system startup with start-->run-->"msconfig" and removed winupdate86 from the startup. Then once you restart you can access the registry, delete the necessary registry keys and re-enable the task manager. This page shows the key you need to go to: http://www.theeldergeek.com/enable_disable_task_manager.htm Most of my attempts to implement the suggestions on this web page or the comments section failed. Finally I had to analyze the processes with ProcMon. Turns out that the culprit is “winupdate86.exe”. I had to download a separate task manager-style program (a freeware called Process Killer) to kill winupdate86.exe. Then I went into the system startup with start–>run–>”msconfig” and removed winupdate86 from the startup. Then once you restart you can access the registry, delete the necessary registry keys and re-enable the task manager. This page shows the key you need to go to:
http://www.theeldergeek.com/en.....anager.htm

]]> By: spondon http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36261 spondon Tue, 17 Nov 2009 11:42:43 +0000 http://www.411-spyware.com/?p=4694#comment-36261 thanks, the information helped me to get rid of Advanced Virus Remover...... :) thanks,
the information helped me to get rid of Advanced Virus Remover…… :)

]]> By: Jeff http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36254 Jeff Tue, 17 Nov 2009 02:40:51 +0000 http://www.411-spyware.com/?p=4694#comment-36254 Advanced Virus Remover will not let me into the task amanger or let me run regedit any ideaas? Advanced Virus Remover will not let me into
the task amanger or let me run regedit any ideaas?

]]> By: Entropy http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36222 Entropy Fri, 13 Nov 2009 07:08:20 +0000 http://www.411-spyware.com/?p=4694#comment-36222 I've fixed this a couple of times now. My dad and his friends have been passing it around a lot lately. The quickest and easiest removal method I've found is to... First disconnect from the internet and do not acknowledge any of the AVR GUIs. Just push them to the side. Use window explorer to peruse the program files directory. You should find a directory named Advance Virus Remover(al). Note the creation date. The trick is to roll back to a restore point before this date. The assumption here is that you haven't been able to do anything meaningful since that date anyway so no loss. To get to the restore point GUI, attempt something that generates the "this file is infected, can't run..." GUI. For example, cntl-alt-del in a futile attempt at starting the task manager. Don't cancel or acknowledge the AVR form. Leave it on the screen. (This is very important!) Next, start -> all programs -> accessories -> command prompt. From the command line, cd to c:\windows\system32\restore and fire up system restore (rstrui.exe). This should start the restore GUI. Pick a restore point before the AVR creation date. When the system reboots, you should be good to go. Highly recommended to then run a full virus scan first thing. AVR is nasty nasty. I’ve fixed this a couple of times now. My dad and his friends have been passing it around a lot lately. The quickest and easiest removal method I’ve found is to…

First disconnect from the internet and do not acknowledge any of the AVR GUIs. Just push them to the side. Use window explorer to peruse the program files directory. You should find a directory named Advance Virus Remover(al). Note the creation date. The trick is to roll back to a restore point before this date. The assumption here is that you haven’t been able to do anything meaningful since that date anyway so no loss.

To get to the restore point GUI, attempt something that generates the “this file is infected, can’t run…” GUI. For example, cntl-alt-del in a futile attempt at starting the task manager. Don’t cancel or acknowledge the AVR form. Leave it on the screen. (This is very important!) Next, start -> all programs -> accessories -> command prompt. From the command line, cd to c:\windows\system32\restore and fire up system restore (rstrui.exe). This should start the restore GUI. Pick a restore point before the AVR creation date. When the system reboots, you should be good to go. Highly recommended to then run a full virus scan first thing. AVR is nasty nasty.

]]> By: Entropy http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-36221 Entropy Fri, 13 Nov 2009 06:37:38 +0000 http://www.411-spyware.com/?p=4694#comment-36221 If you're having issues running .exe's (AVR generates a nasty popup then cancel's the command), I found that if you leave the popup displayed, subsequent .exe's succeed. A window gui blocking thing? Don't know. But with this little trick, you can then get to things like the task manager or command tool. After that, it's pretty straight forward to start killing processes, deleting files and cleaning up your registry. If you’re having issues running .exe’s (AVR generates a nasty popup then cancel’s the command), I found that if you leave the popup displayed, subsequent .exe’s succeed. A window gui blocking thing? Don’t know. But with this little trick, you can then get to things like the task manager or command tool. After that, it’s pretty straight forward to start killing processes, deleting files and cleaning up your registry.

]]> By: Jeff http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-35992 Jeff Wed, 07 Oct 2009 13:58:34 +0000 http://www.411-spyware.com/?p=4694#comment-35992 My home PC is infected with Advanced Virus Remover. I tried to recover with Fix-It Utilities. Now Windows XP will not complete start-up ; I only get my wallpaper. Is there any way to recover from this so I can get to the data on my harddrive ? My home PC is infected with Advanced Virus Remover. I tried to recover with Fix-It Utilities. Now Windows XP will not complete start-up ; I only get my wallpaper. Is there any way to recover from this so I can get to the data on my harddrive ?

]]> By: Rob http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-35871 Rob Sat, 19 Sep 2009 19:09:26 +0000 http://www.411-spyware.com/?p=4694#comment-35871 AVR seems to have been removed from my computer. I deleted the program files and registry entries manually in safe mode because AVR was blocking my web browsers and .exe programs. The popups aren't there anymore and I can access the Internet and run other programs now. Thanks for the article, it seems to have saved my laptop. AVR seems to have been removed from my computer. I deleted the program files and registry entries manually in safe mode because AVR was blocking my web browsers and .exe programs. The popups aren’t there anymore and I can access the Internet and run other programs now. Thanks for the article, it seems to have saved my laptop.

]]> By: amanda http://www.411-spyware.com/remove-advanced-virus-remover/comment-page-1#comment-35856 amanda Thu, 17 Sep 2009 17:44:10 +0000 http://www.411-spyware.com/?p=4694#comment-35856 I downloaded a free copy of Malwarebytes to help me get rid of this. After I scanned my computer with that program I was able to go back and follow the manual removal instructions. I do not see any more signs of it being on my computer but I think I am going to continue to scan just to be sure. I hope this helps. I downloaded a free copy of Malwarebytes to help me get rid of this. After I scanned my computer with that program I was able to go back and follow the manual removal instructions. I do not see any more signs of it being on my computer but I think I am going to continue to scan just to be sure. I hope this helps.

]]>