AnVi (another name of Antivirus) is a malicious program which has the main objective – to trick people into installing its license. It looks quite similarly to legitimate Nod32 antivirus, so many people may get caught easily by this scam. AnVi, or Antivirus, stays undetected while infecting targeted system because of the use of Trojans. However, the other its activity is clear because just like any other rogue anti-spyware it will display fake pop-ups, alerts and notifications.
AnVi starts running fabricated security scanners just after its infiltration. Malware returns scan results full of spywares, trojans, worms and other malware because it tries to scare its victims and then offers its licensed version. Fake alerts and system scanners also announce that AnVi has detected malicious programs that, in fact, are legitimate antivirus softwares, such as AVG, Spyware Doctor, Avira, McAfree, F-secure or Nod32. Alerts that are displayed by AnVi say:
Uncertified {antivirus name} antivirus software detected on your computer. You need to remove {antivirus name} software for correct operation of the Antivirus.
Attention: If you don`t remove {antivirus name} software, the performance of your computer will dramatically degrade.
Press “OK” to remove the {antivirus name}
Do not delete anything what is reported by AnVi or Antivirus! In the end, you will make your computer unprotected and infected even more. Remove AnVi or Antivirus rogue anti-spyware immediately if it is spotted on your computer and please do this on time. AnVi removal guide is given below.
Automatic Malware removal tools
(Win)
Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,
(Mac)
Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,
Does nothing. From the description Vista laptop definately infected last night w/ AnVi virus. However can find almost none of the files /registry locations mentioned in the article. Assume the virus now uses unpublished random locations.
John : try running MSconfig first and see if some processes launch from C:\Documents and Settings\… or C:\users\.. Disable these. If not, post hijackthis .