Remove Personal Antivirus


Personal Antivirus is a fake antivirus and anti-spyware program created by known company Innovagest 2000 who is also popular for creating various widely-spread unwanted programs. Common method to distribute this program is through scam security websites and trojan downloader. If got infected, users may notice a display of alert messages and virus scan running on the computer that will always remind to register Personal Antivirus.

WhatáPersonal Antivirus Does?

The program will install itself on computer and frequently run its own virus scan.

personalantivirus_img1

It will modify Windows Registry and add the following entry/entries:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\Personal Antivirus_is1
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “Personal Antivirus”

The threat will drop the following malicious file/files:

  • c:\WINDOWS\system32\log.txt
  • c:\Program Files\Personal Antivirus\activate.ico
  • c:\Program Files\Personal Antivirus\Explorer.ico
  • c:\Program Files\Personal Antivirus\PerAvir.exe
  • c:\Program Files\Personal Antivirus\unins000.dat
  • c:\Program Files\Personal Antivirus\uninstall.ico
  • c:\Program Files\Personal Antivirus\working.log
  • c:\Program Files\Personal Antivirus\db
  • c:\Program Files\Personal Antivirus\db\DBInfo.ver
  • c:\Program Files\Personal Antivirus\db\ia080614.db
  • c:\Program Files\Personal Antivirus\db\ia080618x.db
  • c:\Program Files\Personal Antivirus\Languages
  • c:\Program Files\Personal Antivirus\Languages\IAEs.lng
  • c:\Program Files\Personal Antivirus\Languages\IAFr.lng
  • c:\Program Files\Personal Antivirus\Languages\IAGer.lng
  • c:\Program Files\Personal Antivirus\Languages\IAIt.lng
  • c:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
  • c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus
  • %UserProfile%\Application Data\Personal Antivirus\settings.ini
  • %UserProfile%\Application Data\Personal Antivirus\uill.ini
  • %UserProfile%\Application Data\Personal Antivirus\unins000.exe
  • %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus\db
  • %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
  • %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
  • %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
  • %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

How to RemoveáPersonal Antivirus Manually

1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the file.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

How to Easily Remove Personal Antivirus

1. Print this procedure as we need to close all programs running later.
2. Download AntiMalware Application here and save it to your Desktop.
3. Close all open applications.
4. Double-Click on the downloaded mbam-setup.exe to start the installation. If unable to execute, infections on computer is preventing it from running, rename the file mbam-setup.exe to anything (like myfile.exe)
5. Run the installation on the default settings. No changes are necessary.
6. Just before completing the installation, make sure that the following are marked check.
Update the program
Launch the program

7. The tool will run and update itself after installation. Close it after the update.

8. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode

9. Click on the icon and start to Perform Full Scan to begin scanning your computer for Personal Antivirus related files.
10. After scanning, a message will appear stating that the scan is completed successfully. Click OK.
11. Click Show Results and detected threats will be displayed.
12. Make sure that all threats are marked check, then click Remove Selected to begin removal of the malicious files.
13. Exit AntiMalware Apps and restart your computer.

14. Personal Antivirus and all its files are now removed from your computer. To guard your computer from this threat and avoid future infections, you may want real-time protection from a full version of anti-malware program..

Leave a Comment