How to remove ECO Antivirus 2010 rogue anti-spyware

Malware Description:
ECO Antivirus 2010 is another denomination of Eco AntiVirus (alias Eco AV) rogue anti-spyware application which, in its turn, is a clone of the infamous Green AV scareware. ECO Antivirus 2010 is being rapidly distributed through bogus online virus scanners and other misleading advertisements you may view when surfing the web. By encouraging you to click on those ads, ECO Antivirus 2010 tries to get installed onto your computer without your approval. Initially, ECO Antivirus 2010 infiltrates in the shape of the trial version which keeps asking you to register it. And here’s how ECO Antivirus 2010 acts to win your trust. First of all, ECO Antivirus 2010 claims to care of the Earth by sharing its profits with the environmental campaign pursuing the commendable mission of rescuing the green forests of Amazonia. Should the above be true – well, then ECO Antivirus 2010 would be a good choice in terms of PC protection. However, please keep in mind that not a penny from ECO Antivirus 2010 licenses sold shall be spent on saving the environment. It’s just a fable invented by the fraudulent vendors of ECO Antivirus 2010 to manipulate people. An even worse thing about ECO Antivirus 2010 is the fact that it doesn’t really detect and remove real computer viruses, even though it promises to. Moreover, ECO Antivirus 2010 floods the compromised system with such a great number of deceptive and mega-annoying ads that you might find it hard to use your computer. ECO Antivirus 2010 also deteriorates the system performance and uses up much of the PC’s processing resources. To cut the long story short, you should immediately remove ECO Antivirus 2010 if it installs onto your PC without your knowledge and permission.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

ECO Antivirus 2010 Free Scanner and Remover: Download Now

ECO Antivirus 2010 Screenshot:

ECO Antivirus 2010

How to remove ECO Antivirus 2010 manually:
Manual removal of ECO Antivirus 2010 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\All Users\Application Data\eca
  • %Documents and Settings%\All Users\Application Data\eca\Base.dat
  • %Documents and Settings%\All Users\Application Data\eca\msdl.exe
  • %Documents and Settings%\All Users\Application Data\eca\msll.exe
  • %Documents and Settings%\All Users\Application Data\eca\vec.exe
  • %Documents and Settings%\All Users\Application Data\Microsoft\Machine
  • %Documents and Settings%\All Users\Application Data\Microsoft\Machine\WStech.dll
  • %Documents and Settings%\All Users\Start Menu\Programs\Eco AntiVirus
  • %Documents and Settings%\All Users\Desktop\Eco AntiVirus.lnk

The registry entries that need to be removed are as follows:

  • HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
  • HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
  • HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\S
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “mxcll”

Please, be aware that manual removal of ECO Antivirus 2010 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal ECO Antivirus 2010, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download ECO Antivirus 2010 Remover

Like This Article? Let Others Know!

Post a Comment: