Earth AV, also known as the Earth Antivirus is a misleading computer security program that has no capability to perform as a real security tool. This is the primary reason why it was dubbed as rogue, fake and unwanted software. Earth AV malware is promoted as “Protect your PC, files, and identity with the industry’s fastest, lightest, most complete security solution.” But in reality, Earth AV was created to deceive users with fake virus detection and aims to sell the software via fraudulent manner. Aside from that, this fake antivirus also promises to have advanced protection, block phishing web sites and secure your home network. All of these were not feasible when diagnosing its installed files. It does not even have a database and necessary files to protect a computer from threats and harmful attacks.
It is clear that sole purpose of Earth AV makers is to trick computer users. They wanted to reach as many victims as they can by using a Trojan to deploy this malware. Trojans are capable of finding weak spot on systems to gain access. Once it is inside the computer, it will fetch the files of Earth AV from remote server. Without user’s consent, trial version of Earth AV will get installed.
Remove Earth AV as soon as an instance was observed on computer. Only legitimate anti-malware application that can be downloaded below this page can remove it and all of its associated files. Earth AV can also be removed manually by technically trained computer users.
What are the Symptoms of Earth AV Infection?
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Earth AV”
- HKEY_CURRENT_USER\Software\Earth AV
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Earth AV
- HKEY_LOCAL_MACHINE\SOFTWARE\Earth AV
The threat will drop the following malicious files:
- %APPDATA%\mozilla\firefox\profiles\[PROFILE NAME]\gsl.dll
- %AllUsersProfile%\Start Menu\Programs\ Earth AV
- %Documents and Settings\All Users\Application Data\Microsoft\Machine\WStech.dll
- %Documents and Settings\All Users\Application Data\Microsoft\Machine
- %Documents and Settings\All Users\Application Data\EAV\Base.dat
- %Documents and Settings\All Users\Application Data\EAV\vec.exe
- %Documents and Settings\All Users\Application Data\EAV\msll.exe
- %Documents and Settings\All Users\Application Data\EAV\msdl.exe
- %Documents and Settings\All Users\Application Data\EAV
- %Documents and Settings\All Users\Desktop\ Earth AV.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\Earth AV
- %Documents and Settings%\All Users\Application Data\Earth AV
- %Program Files%\Earth AV
- EAV[1].exe
- Earth AV .lnk
How to Remove Earth AV Manually
1. Restart your computer in SafeMode
- Press F8 on keyboard as soon as you turn on the computer
– Select SafeMode to start the computer loading only minimal resources
2. Delete Windows registry entries the malware created. It is important to BACKUP YOUR REGISTRY FIRST.
– On Windows Start Menu, Click Start > Run
– Type in the field, regedit
- Find registry entries mentioned above and delete if necessary
3. Files related to Earth AV must be deleted:
– Browse and delete malicious files detected above.
– Some files cannot be deleted instantly. Press Ctrl+Alt+Del to open Windows Task Manager, look for any virus-related files mentioned on this page and highlight it, click End Process. Try to delete the file once more.
4. Run Antivirus Program
– You must be connected to Internet to be able to update your anti-virus program. This is needed to have the latest database available and detect newer threats.
– Thoroughly scan the computer and clean or delete all detected threats.
How to Easily Remove Earth AV
1. Print this procedure as we need to close all running programs later.
2. Download AntiMalware Application here and save it to your Desktop.
3. Close all open applications.
4. Double-Click on the downloaded mbam-setup.exe to start the installation. If unable to execute, infections on computer is preventing it from running, rename the file mbam-setup.exe to anything (like myfile.exe)
5. Run the installation on the default settings. No changes are necessary.
6. Just before completing the installation, make sure that the following are marked check.
– Update the program
– Launch the program
7. The tool will run and update itself after installation. Close it after the update.
8. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
9. Click on the icon and start to Perform Full Scan to begin scanning your computer for Earth AV related files.
10. After scanning, a message will appear stating that the scan is completed successfully. Click OK.
11. Click Show Results and detected threats will be displayed.
12. Make sure that all threats are marked check, then click Remove Selected to begin removal of the malicious files.
13. Exit AntiMalware Apps and restart your computer.
14. Earth AV and all its files are now removed from your computer. To guard your computer from this threat and avoid future infections, you may want real-time protection from a full version of anti-malware program.
