Antivirus 10: Fake Antivirus Removal Guide

Antivirus 10 is a fake software that pretends to be an antivirus program and displays false warnings about infections on your computer. It is designed to scare users into thinking that their machine is compromised and they need to buy a full Antivirus 10 version in order to remove the threats. Instead, the displayed threats do not exist and you should not believe these fake warnings. Your computer is most likely safe, at least from the false threats displayed by the program.

The fake program looks convincing since it replicates the operations of many real antiviruses: it imitates a scan process, presents a report about system condition and a list of viruses. It also shows fake Windows errors about infections on your system and blocks internet browsers. For a regular user, it is hard to distinguish this program from a legitimate antivirus. The only possible suspicious sign is that you have never installed such software, before it appeared on your system and started displaying errors.

You should remove Antivirus 10 as soon as possible. It gains control of your computer and limits the usability to minimum. Many programs are terminated while the virus constantly schedules and launches various warnings and popups. This results in increased resource usage and a significant slowdown of the system. There is a risk of further damage and security issues since the virus has an access to your system settings.

We recommend simply using the free automatic removal and protection tool provided below. It will not only remove the threat but also protect your computer from other viruses in the future. You can also use the manual removal guide provided in this page if you feel confident in editing important Windows system files and settings. Have in mind that manual removal does not eliminate the possibility of this or another virus reappearing on your machine in the future.


Recommended Method: Download “Antivirus 10” Fake Antivirus Removal Tool

Version:   All Updated:   2 days ago Compatible OS:   All
This is the most suitable program for automatically removing the threat and repairing your PC.
Works with: Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP. Read instructions here
File name Size
mb3-setup.exe 56.5 MB

Click here to download alternative tool

IMPORTANT: you might need to boot your computer in Safe Mode or use another Windows Account (for example, guest) in order to launch the removal tool. We also recommend renaming the removal tool file in order to avoid the blocking from Antivirus 10 (for example, rename it to “iexplorer.exe“).

What is Antivirus 10?

Antivirus 10 is a fake software pretending to be a real antivirus. Even though it looks like a real program i atcually has no ability to scan your computer and detect threats at all. Instead, it simply shows a fake predefined list of various threats and tries to convince the user that they have been detected on the user’s computer. Antivirus 10 asks you to buy a full version and activate it in order to remove the viruses. However, you would simply end up losing your money by buying a fake program that does not do anything.

Antivirus 10 is created to look as a real antivirus program. Moreover, the design resembles real Windows components (for example, Windows Firewall) so it can trick users into thinking that this program is legitimate. This is also accompanied with constant fake Windows popups and warnings that Antivirus software is not enabled and your computer is at risk.

Even though your computer has none of the listed threats it might feel like it since the Antivirus 10 malware slows down your computer significantly and displays various errors constantly. It also blocks various processes including notepad, wordpad, several antivirus programs and installed web browsers (chrome.exe, opera.exe, firefox.exe, iexplorer.exe).

Antivirus 10 will also randomly open random websites (for example, viagra.com and porntube.com) through Internet Explorer in order to make you think that the computer has been compromised by one of the listed viruses.

This is an example message of a blocked browser:

Warning
This app has been blocked for your protection.
Windows has blocked the execution of this application to prevent further infections on your PC.

Program name: chrome.exe
Publisher: Google Inc
Status: Infected

The fake warnings range from dialog boxes popping up in the bottom right corner to error windows and other alerts. Here are many of the fake warnings:

System Information
Your system is infected! Last system scan found virus infections on your PC. 

It is highly recommended to remove them immediately from your system 
to prevent damage such as: 

System crash and frequent failures
Permanent loss of data and important documents
System slowdowns and Internet connection loss
Bank account, Facebook, Twitter data gets stolen
System Alert
Malware has been detected on your computer. 
Click here to protect your PC with Antivirus 10
System Information
Antivirus10 has found viruses on your computer. 
It is recommended to disinfect files as soon as possible.
Windows Security Alert
Antivirus software is not activated. 
Your system is at risk now. 
Windows highly recommends you to activate your antivirus software 
to protect your system against malicious intrusions from the Internet.
System Warning
Attention! The security of your computer has been compromised! 
Microsoft Windows files are now corrupted. 
Malicious software, which can lead to irreversible damages to your hard drive 
have been found on your system! 
The destruction of important files in C:\\WINDOWS could lead to data loss, 
system errors and hard drive failure! 
Click YES to remove malicious software and protect your PC. (Recommended)
System Danager
Warning! Windows has detected virus infection! 
Somebody is trying to get access to your system files 
and steal your passwords! 
Prevent identity theft and remove viruses now (highly recommended)

There are many ways to get infected by this virus. Usually it is bundled with suspicious free software or illegal torrents, cracks and other downloads. Sometimes you can get it by opening infected email attachments, compromised links and advertisements. Finally, there are many fake websites and forums claiming that this antivirus is a real program and users can be tricked into downloading it themselves.

You should remove this program from your computer as it is the one causing all the symptoms of an infected computer. Also, Antivirus 10 gains a complete control of your computer and can cause you more damage if not deleted properly.

We have prepared manual removal instructions below. However, we recommend restarting your computer in Safe Mode and using the free automatic removal and protection tool provided above. This way you will be sure that the virus is terminated completely as well as that your computer is safe from any further threats. Removing Antivirus 10 manually requires knowledge in editing important Windows files and settings and might not completely eliminate all traces of this threat depending on the level of the damage already done to your computer.

Here are some screenshots of Antivirus 10 fake software:

    
 

    
 Manual Removal Instructions:

NB: Since this virus is very aggressive and blocks as many processes as possible it might be difficult to deal with. This is why we still recommend the automatic removal method. We do not guarantee that there will be no traces of Antivirus 10 left after you follow this guide since the virus controls many parts of your operating system.

Make sure to bookmark this page while removing the threat. The best way is to keep this page open on another device while you are working.

Step 1:

You need to reboot your infected computer in Safe Mode. This will curb the abilities of the virus.

IMPORTANT: If you still cannot get through the virus in Safe Mode and perform the necessary actions described below, we recommend launching Windows with another account, for example, Guest.

When your computer is infected by a virus some of its features may be locked or compromised. You need to bypass this by rebooting your computer using Safe Mode. This will allow you to remove the virus.

Since Safe Mode only has the most basic features do not be scared that your Windows look completely different!

Click here to show how to reboot Windows 98, XP, Vista or Windows 7 in Safe Mode

  1. Restart your computer (if it is locked you can do this by physically pressing the power button on your computer).
  2. As soon as the PC starts booting begin constantly clicking F8 key on the keyboard until you get the following screen:
  3. Use arrow keys to highlight Safe Mode With Networking and press Enter.
  4. Wait for the Windows to launch.

 

Click here to show how to reboot Windows 8, 8.1 or Windows 10 in Safe Mode

F8 method (1/4):

Restarting and constantly hitting F8 might not work for this version of Windows since the booting is much faster and does not always react to the key presses. Try this method first and then proceed to other methods if this does not help.

  1. Restart your computer (if it is locked you can do this by physically pressing the power button on your computer).
  2. As soon as the PC starts booting begin constantly clicking F8 key on the keyboard.
    If it does not work try repeating the same procedure but this time holding Shift key and clicking F8.
  3. Follow instructions from Step 5 below:

Shift+Restart method (2/4):

  1. Click the Power icon at the login screen or in the settings charm.
  2. Hold Shift key on your keyboard and click Restart with your mouse while holding:
  3. Click Troubleshoot:

  4. Click Advanced options:
  5. Click Startup Settings:
  6. Click Restart:
  7. Now press F5 key on your keyboard to enable Safe Mode With Networking:

System configuration method (3/4):

  1. Press and hold Windows () key and click R key.
  2. Enter msconfig.exe and click OK:
  3. When System Configuration opens go to the Boot tab:
  4. Check the box “Safe Boot” in Boot options and click OK.
  5. When prompted, click Restart.
  6. Windows will now start in Safe Mode.

System Recovery method (4/4):

If everything above fails you can try inserting System Recovery CD or DVD (works only with Windows 8) or System Recovery USB Memory Stick (works with Windows 8 and 8.1). You will be able to choose Troubleshoot option. The steps are then identical as in Shift + Restart method starting from #3.

Step 2:

Remove the dangerous processes associated with Antivirus 10 fake program.

Press CTRL + SHIFT + ESC in order to launch Windows Task Manager and go to Processes tab. Alternatively you can launch it by right-clicking on Windows toolbar/startbar and clicking Start Task Manager.

You will have to scan all processes individually in order to find out which of them are dangerous. Right-click on each of them and choose Open File Location.

Go to virustotal.com and upload that file for a scan.

If the file is marked as dangerous, right-click on the process and choose End Process, then delete that file in the location you have opened before.

Repeat the procedure with all processes in the list.

Step 3:

Try restoring the old system settings using System Restore. The virus has changed them so you need to revert to the old ones again.

Some variations of the virus might remove your system restore points so this step might be unsuccessful.

Press and hold Windows () key and click R key.

Enter the following in the field:

rstrui.exe

Click OK.

Click Next.

Check Show more restore points.

If you see any restore points, restore the system. Make sure you restore from a point that has been created before the attack happened.

If there are no restore points you will see “No restore points have been created…” error.

Step 4:

Remove virus IPs from your hosts file. They are blocking your access to the network.

Press and hold Windows () key and click R key.

Enter the following in the field:

notepad %windir%/system32/Drivers/etc/hosts

Click OK.

Your hosts.ini file will open in Notepad. Delete any IPs that are not marked with an “#” in front of them except the “127.0.0.1 localhost” entry. Here is an example:

Step 5:

Clean up your DNS.

Press and hold Windows () key and click R key.

Enter the following in the field:

ncpa.cpl

Click OK.

It will open your current network adapters list.

Right-click on the one you currently use (unused usually have a red X near them while the active one is usually green).

Choose Properties.

Click on Internet Protocol Version 4 (ICP/IP) (make sure the checkbox is checked near it).

Click Properties.

First, select Obtain DNS server automatically.

Then click Advanced… and go to DNS tab in the newly opened window.

Remove everything from the DNS server addresses, in order of use.

Step 6:

Remove all unknown startup items.

Press and hold Windows () key and click R key.

Enter the following in the field:

msconfig.exe

Click OK.

Go to the Startup tab.

Uncheck all entries that have “Unknown” as Manufacturer. Sometimes the entries might have a fake manufacturer, so use your common sense and uncheck anything potentially dangerous.

You can check process location by hovering your mouse over the “Command” column. Navigate to the location and scan the file using virustotal.com if it looks suspicious but you are not sure.

Click OK when you are finished unselecting all potentially dangerous processes.

Step 7:

Clean up your registry.

Press and hold Windows () key and click R key.

Enter the following in the field:

regedit.exe

Click OK.

Press keyboard buttons CTRL + F and enter:

antivirus 10

Click Find Next.

If you find anything with the virus name, delete the registries by right-clicking on it and choosing Delete. Be careful to not delete important registry entries unrelated to the virus! Otherwise you might damage the file system!

Repeat the “Find Next” and Delete procedure by searching again and deleting until no virus entries are left.

Step 8:

Clean up your temporary files.

Press and hold Windows () key and click R key.

Enter the following in the field:

%Temp%

Click OK.

A new directory will open with with a lot of temporary files and folders.

Select all temporary files by simultaneously pressing CTRL + A and delete them. This will not affect your computer’s work since you can safely delete all temporary files.

Step 9:

Check for any recent changes in all the other important files.

Press and hold Windows () key and click R key.

Enter the following in the field:

%AppData%

Click OK.

You don’t need to delete anything here. Just search for any recent changes (by “Date Modified”) in the files. If you see that the files have just been changed, then scan them with virustotal.com and remove if needed. If there are no suspicious changes just leave everything as it is.

Repeat this step with the following three directories:

%LocalAppData%
%ProgramData%
%WinDir%

Remember: delete something only if it has been modified recently and is infected according to VirusTotal scans. Otherwise you might remove critical system files!

Step 10:

Remove any suspicious programs that have been installed recently and might contain the virus.

Start by opening the Programs and Features window:

Press and hold Windows () key and click R key while holding.

Enter the following in the field:

appwiz.cpl

Click OK.

We recommend sorting the programs by “Installed On” column (simply click on the column name in order to sort by this value).

Look for any recently installed suspicious programs that might contain the virus as a bundle or could be the virus itself. If you have never seen or used an app chances are that it is an unwanted software.

Uninstall all suspicious programs by right-clicking on them and choosing Uninstall…

Repeat this process until no more suspicious programs are left.

Step 11:

Delete Antivirus 10 tasks from Windows Tasks folder.

Hold Windows () key and click R key.

Enter the following in the field:

%Tasks%

Click OK.

A folder with all jobs will open. Delete all files that could be generated by the virus.

Some of the jobs might be legitimate tasks so do not delete all of them.

After removing the virus

Even if you have successfully removed the virus and the symptoms are gone you should secure your computer with a proper real antivirus in order to avoid further infections. Also, some traces of Antivirus 10 might have been left even after you performed the removal steps so we recommend scanning your computer with the free scan and protection tool provided above.


Share your experience with us by leaving a comment!

Leave a comment to tell us about your experience removing this threat!
We can also help you if you run into any problems during the process, just don't hesitate to ask!

Leave a Reply

Your email address will not be published. Required fields are marked *