Welcome to remove-malware.net

How to remove Contraviro fake security program

Malware Description:
Contraviro is a counterfeit anti-spyware program emanating from the same group insecure applications as the infamous UnVirex. Sticking to the conventional principles of rogue anti-spywares functioning, Contraviro makes it on board a new host computer through security exploits or via insecure online downloads. In either case, it’s Trojans that “contribute” to successful installation of Contraviro unregistered version onto random computers. Having penetrated into a system or network, Contraviro will create a number of its own registry values in the System Registry thus stuffing it up to slow down the compromised computer considerably. When Contraviro is running, it will as well issue bogus scanners that pretend to check your machine for insecure activity and do report malicious applications in great numbers. However, the risks reported by Contraviro scanners and alerts are all either harmless and legitimate Windows entities or non-existent programs you needn’t fear. In any case, it’s strongly advised to ignore the detections claimed by Contraviro, or else you may end up paying for Contraviro licensed version which is a scam. One more trick about Contraviro is the fact that it tends to install a specific dll known as Layered Service Provider (LSP) in your system. FYI: LSP is a program that controls outbound traffic to secure your online activities. The bad thing is that deleting Contraviro rogue anti-spyware the wrong way is likely to uninstall the LSP as well, which will definitely result in loss of network access. So please stick to the removal guide below to remove the exotic-named rogue anti-spyware product called Contraviro and get your system back to normal.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

Contraviro Free Scanner and Remover: Download Now

Contraviro Screenshot:

How to remove Contraviro manually:
Manual removal of Contraviro is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Program Files%\Contraviro
• %Program Files%\Contraviro\Contraviro.exe
• %Program Files%\Contraviro\daily.cvd
• %Program Files%\Contraviro\Drvfltip.sys
• %Program Files%\Contraviro\hjengine.dll
• %Program Files%\Contraviro\IEAddon.dll
• %Program Files%\Contraviro\main.cvd
• %Program Files%\Contraviro\MFC71.dll
• %Program Files%\Contraviro\MFC71ENU.DLL
• %Program Files%\Contraviro\msvcp71.dll
• %Program Files%\Contraviro\msvcr71.dll
• %Program Files%\Contraviro\pthreadVC2.dll
• %Program Files%\Contraviro\shellext.dll
• %Program Files%\Contraviro\siglsp.dll
• %Program Files%\Contraviro\uninstall.exe
• %Documents and Settings%\All Users\Start Menu\Programs\Contraviro
• %Documents and Settings%\All Users\Desktop\Contraviro.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Contraviro.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\Contraviro.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\How to Register Contraviro.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\Register Contraviro.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Contraviro.lnk

The associated registry entries to be removed are as follows:

• HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\antivirus_contextscan
• HKEY_CLASSES_ROOT\AppID\{C0E56AC2-9F72-436E-B6E7-AEC28AF9E4EB}
• HKEY_CLASSES_ROOT\AppID\IEAddon.DLL
• HKEY_CLASSES_ROOT\CLSID\{08EEC6AD-7486-487F-89B7-5A3716DDAE14}
• HKEY_CLASSES_ROOT\CLSID\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
• HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\antivirus_contextscan
• HKEY_CLASSES_ROOT\Drives\shellex\ContextMenuHandlers\antivirus_contextscan
• HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\antivirus_contextscan
• HKEY_CLASSES_ROOT\Interface\{5B184B9D-B7BD-4FEA-8D1F-5E27182206A5}
• HKEY_CLASSES_ROOT\TypeLib\{3ED0E410-5C8E-47B6-A75D-D10B886E903C}
• HKEY_LOCAL_MACHINE\SOFTWARE\Contraviro
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Contraviro
• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “Contraviro”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Contraviro”

Please, be informed that manual removal of Contraviro is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Contraviro which will save your time and enable avoiding any system malfunctions and guarantee the needed result.