When this program downloaded and searched it supposedly found a worm…then it wouldn’t let me use other programs on my computer. I went to all programs on my control panel but it wasn’t there to uninstall. I clicked on remove worms and it wanted me to pay for the program. I didn’t want to do this but now I can’t get rid of it…any ideas?
Related posts:
4 responses so far ↓
1 don piano // Jul 15, 2009
You cannot uninstall it - Personal Antivirus is malware itself (otherwise known as a ‘rouge’ anti-virus program). Malwarebytes’ Anti-Malware is very good at removing these types of infections.
Removal Guide (MBAM download link included):
http://www.bleepingcomputer.com/virus-removal/remove-personal-antivirus
Once downloaded, if MBAM will not install, rename the installation file (mbam-setup.exe) to something else (e.g heregoes.exe) and try installing it again.
If installation is successful but MBAM will not run, rename the program file (mbam.exe - located by default in /Program Files/Malwarebytes’ Anti-Malware/) and try running it by double-clicking on the new filename (the shortcut will no longer work as the program file has been changed).
EDIT:
If you cannot access the Removal Guide above, try booting into ‘Safe Mode with Networking’ and access it from there. Once in Safe Mode, read the removal guide above and download MBAM (but do not run it yet). Boot back into normal mode (simply reboot your computer) and then try to install it. Do not install it (or run it) in Safe Mode unless you have absolutely no other choice (MBAM is not designed to run in Safe Mode - it includes a special driver that does not work in Safe Mode).
How to boot in Safe Mode: http://www.computerhope.com/issues/chsafe.htm (ensure you select ‘Safe Mode with Networking’ or you will not be able to access the internet).
2 Trailerpark Pirate // Jul 15, 2009
>>>>(This will fix it for free!)<<<<
(Note)If you have a taskbar skip step one.
>>>>(Read on)<<<<
Some malware shuts down your taskbar/manager but they give you access to the internet to buy their rogue crap! So click on the button on their fake scanner that opens up to their web site and instead of paying their extortion do this!
1.If your using (IE) type C:/ Into the address bar and hit [enter] and a file window will pop up and like magic your taskbar/manager appears?
If Your Using (Firefox) do this: Download something, anything (Not Another Virus preferably?) When it’s done downloading Hit Ctrl + j at the same time (All Three at the same time!) Your download window will pop up,Rt click on the download that you just downloaded and choose "Open Containing Folder" and like magic your taskbar/manager appears!
2.Download Malwarebytes
(Free)http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol
3.Right click on the mbam setup app you downloaded and rename it xxxx then Dbl click on it and install and update it(If you can) and run a full scan and delete/quarantine all entities it finds.
(Note)If you couldn’t update before 1st scan update Malwarebytes and do another scan with a updated Malwarebytes!
If you already have Malwarebytes and it wont open do this.
Go to the Malwarebytes program file located C:/Program Files/Malwarebytes and Rt click on the (red) mbam app and rename it to xxxx (Not the mbamgui) then Dbl click on it, do an update (If you can) and run a full scan and delete/quarantine all entities it finds.If you couldn’t update before 1st scan update Malwarebytes and do another scan with a updated Malwarebytes!
4.Download Superantispyware and install,update, and do a quick scan and delete/quarantine all entities it finds.
http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html?tag=mncol
Go here for more info?
http://grizzom.blogspot.com/2009/07/easy-step-by-step-guide-for-removing.html
Stay Safe Out There (~8
3 Gegussa // Jul 15, 2009
Follow the instruction on the link below, it’s step by step instructions how to clean your computer system from Personal Antivirus using Antispyware tool . It’s very effective and fast
Easy steps removal using Spyhunter:
http://www.pcthreat.com/parasitebyid-7813en.html
4 Adam // Jul 15, 2009
Personal Antivirus :–
Now days, many computer users experiencing external threats like spywares, adwares, malwares and many more. Personal Antivirus is a new rouge antipsyware software created by company named Innovagest 2000 and it is a clone of "General Antivirus and Internet Antivirus Pro". It is generally comes up with many fake alerts, messages and pop-ups. Most of time, Personal Antivirus comes with pop-up message to install this program.
Personal Antivirus Symptoms :–
Personal Antivirus pop-ups generates following warning messages :–
1. Your computer is infected by viruses attacks and scan your computer using Personal Antivirus.
2. WARNING! Personal Antivirus has found some useless and unwanted files on your computer
3. A Window impersonating Windows Security Center stating that you should purchase Personal Antivirus.
4. Malware threat.
5. Numerous alerts stating that your computer is under attack or that you have malware running on your computer. If you click on these alerts, Personal Antivirus will be installed, or you will be brought to the purchase page for the program.
6. Your Internet Explorer browser will be hijacked to show security warnings when browsing the web that stop you from reaching your desired page.
7. Your computer is infected.
Personal Antivirus Manual Removal Steps :–
We need to delete some dll files, processes and registry entries to get rid off Personal Antivirus. These are the following files that associated with Personal Antivirus infection :–
c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
c:\Program Files\Personal Antivirus
c:\Program Files\Personal Antivirus\activate.ico
c:\Program Files\Personal Antivirus\Explorer.ico
c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Program Files\Personal Antivirus\unins000.dat
c:\Program Files\Personal Antivirus\uninstall.ico
c:\Program Files\Personal Antivirus\working.log
c:\Program Files\Personal Antivirus\db
c:\Program Files\Personal Antivirus\db\DBInfo.ver
c:\Program Files\Personal Antivirus\db\ia080614.db
c:\Program Files\Personal Antivirus\db\ia080618x.db
c:\Program Files\Personal Antivirus\Languages
c:\Program Files\Personal Antivirus\Languages\IAEs.lng
c:\Program Files\Personal Antivirus\Languages\IAFr.lng
c:\Program Files\Personal Antivirus\Languages\IAGer.lng
c:\Program Files\Personal Antivirus\Languages\IAIt.lng
c:\WINDOWS\system32\log.txt
%UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
These are the following registry entries that we have to kill to get rid off Personal Antivirus :–
1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
3. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
4. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
5. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus""
Personal Antivirus Automated Removal Steps :–
We should follow these troubleshooting steps to get rid off Personal Antivirus :–
1. We should delete al
Leave a Comment