Total Virus Protection Removal Guide

Threat Level:
8/10
Rate this Article:
Comments (0)
Article Views: 228

Another cunning member of the rogue anti-virus group of infections is Total Virus Protection. Just like its predecessors, it uses con strategies to entrap users into buying its phony full version.

Hackers use Trojans, hidden in compromised websites, to distribute the rogue. If a user unsuspectingly follows a malicious link, the Trojan creeps into his/her machine without asking for authorization. It immediately starts producing an enormous amount of phony warnings regarding non-existing malware infections. Then Total Virus Protection is downloaded on the computer and the real troubles begin.

The program’s bogus scans start right after the installation of the rogue. They display counterfeit results that, however, might not seem that unreal to an inexperienced user. A computer expert, on the other hand, would quickly recognize some of programs depicted by the scans:

C:\Windows\System32\diskperf.exe is detected as Backdoor.Netdevil.

C:\Windows\System32\hypertrm.dll is detected Trojan.USBsteal.

What the villain does is to pick random legitimate files and claim them to be viruses. Unfortunately, with its red signs stating: “Warning! Your system is infected!” it manages to scare some victims into spending money on its full version by clicking on “Clean Now“.

This is not its only mischief. It slows down the overall performance of the PC by taking up a lot of space and working on the background all the time. Even if the user pays for the program, it does not seize to make troubles.

To avoid becoming a victim of Total Virus Protection, update all your software on time by downloading updates only from the official websites of the products. Furthermore, if you see an unknown program operating on your computer, it is always best to check online for any reviews or user comments on it before purchasing its licence. If you have spotted Total Virus Protection on your computer, remove it as soon as possible via a genuine AV application.

Tested Total Virus Protection removal solution for 64/32-bit Windows 7/Vista/XP/2000
*The Spyhunter scanner download on this site is intended to be used as a detection tool. If you want to use its a removal function, you will need to purchase the full version of SpyHunter.

Total Virus Protection Screenshots:

Total Virus Protection

Total Virus Protection technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1angd.exe1195520 bytesMD5: c1f0d7d04426a463806f2d7d331fe0c5
2totalvirusprotections[1].exe837022 bytesMD5: 7e7a94be4d415af5dc0134eee9c4490b
3%UserProfile%\Start Menu\Programs\Total Virus Protection
4TotalVirusProtection.exe1728512 bytesMD5: e21db19178fc00645a1daa07f5ea93db
5%ProgramFiles%\TotalVirusProtection
6rkgdll.exe318964 bytesMD5: f8f0c55ea22fec3a54e233bfe285ec01
7Total Virus Protection.lnk

Files in the following directories were modified:

  • %UserProfile%\Start Menu\Programs
  • %ProgramFiles%

Memory Processes Created:

# Process Name Process Filename Main module size
1angd.exeangd.exe1195520 bytes
2totalvirusprotections[1].exetotalvirusprotections[1].exe837022 bytes
3TotalVirusProtection.exeTotalVirusProtection.exe1728512 bytes
4rkgdll.exerkgdll.exe318964 bytes

Registry Modifications:

The following Registry Keys were created:

  • Microsoft\Windows\CurrentVersion\Uninstall\Total Virus Protection
  • Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Total Virus Protection
  • Total Virus Protection
  • Microsoft\Windows\CurrentVersion\Run\Total Virus Protection

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *