HackingTruths Blog

Step 1 : Use Windows File Search Tool to Find Antivirus Plus Path
1. Go to Start > Search > All Files or Folders.
2. In the “All or part of the the file name” section, type in “Antivirus Plus” file name(s).
3. To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
4. When Windows finishes your search, hover over the “In Folder” of “Antivirus Plus”, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete Antivirus Plus in the following manual removal steps.
5. “Antivirus Plus” files can be found in the directory path(s):
6. %ProgramFiles%Antivirus Plus %AllUsersProfile%Start MenuProgramsAntivirus Plus
Step 2 : Use Windows Task Manager to Remove Antivirus Plus Processes
1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the “Image Name” button to search for “Antivirus Plus” process by name.
3. Select the “Antivirus Plus” process and click on the “End Process” button to kill it.
4. Remove the “Antivirus Plus” processes files:
5. AntivirusPlus[1].exe AntivirusPlus.exe c:WINDOWSsystemrundll32.exe
Step 3 : Use Registry Editor to Remove Antivirus Plus Registry Values
1. To open the Registry Editor, go to Start > Run > type regedit and then press the “OK” button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete “Antivirus Plus” value, right-click on it and select the “Delete” option.
4. Locate and delete “Antivirus Plus” registry entries:
5. HKEY_LOCAL_MACHINESOFTWAREMicrosoftWi… “AntivirusPlus”
Step 4 : Use Windows Command Prompt to Unregister Antivirus Plus DLL Files
1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the “OK” button.
2. Type “cd” in order to change the current directory, press the “space” button, enter the full path to where you believe the Antivirus Plus DLL file is located and press the “Enter” button on your keyboard. If you don’t know where Antivirus Plus DLL file is located, use the “dir” command to display the directory’s contents.
3. To unregister “Antivirus Plus” DLL file, type in the exact directory path + “regsvr32 /u” + [DLL_NAME] (for example, :CSpyware-folder> regsvr32 /u Antivirus Plus.dll) and press the “Enter” button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister “Antivirus Plus” DLL files:
5. avphl.dll
Step 5 : Detect and Delete Other Antivirus Plus Files
1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
2. Type in “dir /A name_of_the_folder” (for example, C:Spyware-folder), which will display the folder’s content even the hidden files.
3. To change directory, type in “cd name_of_the_folder”.
4. Once you have the file you’re looking for type in “del name_of_the_file”.
5. To delete a file in folder, type in “del name_of_the_file”.
6. To delete the entire folder, type in “rmdir /S name_of_the_folder”.
7. Select the “Antivirus Plus” process and click on the “End Process” button to kill it.
8. Remove the “Antivirus Plus” processes files:
9. AntivirusPlus[1].exe avphl.dll Antivirus Plus.lnk Uninstall Antivirus.lnk AntivirusPlus.exe c:WINDOWSsystemrundll32.exe

http://www.bleepingcomputer.com/malware-...
A scam, get Malwarebytes’ Anti-Malwarehttp://www.malwarebytes.org/mbam.php