AntiVirGear Removal Process
October 6, 2007 – 9:28 am AntiVirGear is a fake anti-spyware program. Do NOT purchase it under any circumstances. The following procedures will help you remove it from your system easily and safely.
Manual Removal Process:
AntiVirGear Removal Processes:
1. Close all program including AntiVirGear (to close AntiVirGear right click on the AntiVirGear icon on the bottom right corner, then select “exit”)
2. Go to C:\WINDOWS\SYSTEM32 folder and try find one of the files below (only one file will be on your computer);
wqzdtjg.dll
ddllup.dll
vmlwp.dlll
gaac.dll
txxkb.dll
iheuv.dll
3. Rename the file that you found above to “foundbadfile.dll” (if you can not remane this file, then try to restart your computer in safe mode then try to rename this file)
4. Go to C:\Program Files\ folder and delete the “AntiVirGear 3.7″ folder (if you can not delete this folder, then try to restart your computer in safe mode then try to delete third folder)
5. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)
6. Restart your computer
7. Go to C:\WINDOWS\SYSTEM32 folder and delete the “foundbadfile.dll” file
8. You have just removed AntiVirGear from your computer.
Remove AntiVirGear with SmithfraudFix:
1. Download SmithfraudFix tool and save it to your desktop. SmithfraudFix is a free tool that S!Ri created to remove fake anti-spyware programs.
2. Restart your computer and boot into Safe Mode.
3. Double-click on the SmithfraudFix.exe icon then follow the screen instructions. (#2 should be selected.)
4. When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.
5. Reboot.
6. You have just removed AntiVirGear from your computer.
(Disclaimers: These instructions are free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages.)
One Response to “AntiVirGear Removal Process”
I renamed vmlwp.dll and restarted my PC. Now AntiVirGear is gone! Thanks for this effective removal process.
By bill on Oct 7, 2007