AV Security 2012 Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 7552
Category: Fake Antispyware

In today’s increasingly hostile and unsafe online world the web is being overrun by rogue antispyware applications like AV Security 2012 that do a good job of emulating genuine security tools. The problem with this is that many PC users are finding it increasingly more difficult to detect fake security tools from genuine and trustworthy applications. AV Security 2012 will enter the system without the user’s permission and will hide its presence from the user. It does not have the ability to detect or quarantine and remove any type of threat from the system, as it is an infection in itself.

AV Security 2012 will use any tactic at its availability to facilitate its surreptitious infiltration of the system. This can range from using bogus online malware scanners to seditious browser hijackers. As of late it has also been reported that AV Security 2012 makes use of infected online flash ads as a part of its online marketing campaign.

Once the rogue manages to securely root itself in the system it will start its attack by initiating a fake security scan of the system. This fake security scan will appear like a legitimate scan as it makes use of genuine and authentic looking graphical user interfaces. It will inform the user that his PC is being overrun by various fake security threats, and that the user needs to pay for AV Security 2012 in order to stave off these attacks.

The rogue will also spam the user with the following falsely generated security threats:

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.

Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.

As a further attack on the system AV Security 2012 will prevent the user from running applications on the infected PC, or from establishing an Internet connection. This is done to further panic the user into thinking his system is under attack, but also to prevent him from running or downloading an application which has the ability to detect remove AV Security 2012 from the system.

Other symptoms associated with this threat include certain system folders and their contents being hidden from users, poor system performance and increased erratic system performance. It has also been reported that randomly generated and deleted Desktop items are created in order to confuse the user and any installed security software even further.

You will need to destroy AV Security 2012 immediately in order to regain complete control of your PC and limit the damage this rogue will be able to cause your PC. Do this safely by investing in a properly functioning security tool which will not only erase AV Security 2012 but also protect the system against similar attacks in future.

Download Remover for AV Security 2012 *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

AV Security 2012 Screenshots:

AV Security 2012

AV Security 2012 technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1ABE.exe283648 bytesMD5: 949ba76d0246bc8dfd7c9920f5f329e0
2%AppData%\ldr.ini
3n.74240 bytesMD5: b40a6b8dc690cbd4e96bc16f6c4bee1c
4%AppData%\svhostu.exe
5%UserProfile%\Desktop\AV Security 2012.lnk
6F9EF3.exe166912 bytesMD5: 8adc9f1bdcfd18aafceff1dbd1707cea
7FVelOBtzPyAiDoF.exe1766912 bytesMD5: 0e54f12d5d681da60c2e66e3b7ace896
8AV Security 2012.lnk
9klmqm122y.exe49152 bytesMD5: 00843c5975394889ed410dc2a6210d54
10%StartMenu%\Programs\AV Security 2012\
11%AppData%\[random]\
12%AppData%\[random]\AV Security 2012.ico
13s523lswp98.exe49152 bytesMD5: 5c1f32763786d045c2fe186d940a9ec5
14%StartMenu%\Programs\Startup\crss.exe
151A1B9.exe166400 bytesMD5: 0874fec6735cc0f4fdbf7c732bc62f54
16v4xEDEgT.exe134656 bytesMD5: 43bf50f46e19710de986693bd7e056eb
17zaberg.exe45056 bytesMD5: a9cd2ba73ed5b431ba8aad56e8d89844
18AV Security 2012v121.exe1676800 bytesMD5: e973b9f221b8155e4842cb2104b5e873
19s523l22mix.exe49152 bytesMD5: 73e80cfa71c28924e16d6e74343a359f
2053VW84ed.exe108032 bytesMD5: de19569f676f00b4099db17778fa6c1b
21454.exe275968 bytesMD5: 658716973a482d8eab0b76df55343337
22%Temp%\svhostu.exe
23%UserProfile%\Start Menu\Programs\AV Security 2012
24%System%\[random].exe
25B69.exe286720 bytesMD5: 2d89ed3a4ce5096ea0dcaf5c9ba5bb0e
26%StartMenu%\Programs\AV Security 2012\AV Security 2012.lnk
27lvvm.exe182272 bytesMD5: ebcd3086072280285592e8a5431adb5d
288F8.exe284672 bytesMD5: f4b81820a1e28d96e8e02b805b0a159c

Registry Modifications:

The following Registry Keys were created:

  • HKEY_CURRENT_USER\Software\AV Security 2012
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *