Welcome to remove-malware.net

How to remove Extra Antivirus rogue anti-spyware

Malware Description:
Extra Antivirus (aka ExtraAntivirus) is a cyber-hazard hailing from the same malware species as Virus Sweeper scareware. It’s the stealthy scaring tactics that make Extra Antivirus a rogue anti-spyware application. Extra Antivirus usually propagates through trojans that are known to establish a backdoor connection to the code which attempts to download Extra Antivirus unregistered version. Once this malicious command is executed, Extra Antivirus infiltrates obscurely and configures your Operating System to launch it upon each system boot. Extra Antivirus tends to drop multiple “dummy” files onto the compromised computer to detect them as corrupted afterwards and thus mislead the victim into believing his/her machine is actually contaminated. The files created by Extra Antivirus are harmless by themselves and used only to manipulate your common sense and scare you into installing Extra Antivirus license. Extra Antivirus applies the generally known malicious techniques for promoting its commercial software – it’s the exaggerated popup alerts and system tray notifications like the “Spyware Alert!” one and others. Besides, Extra Antivirus is known to have triggered bogus system scanners that suddenly launch and pretend to be checking your PC for infections. The stuff detected by Extra Antivirus scanners is predictable: it’s the above-mentioned fake malware files and some other non-existent infections that aren’t there, in the first place. All the misleading PC phenomena involved in Extra Antivirus misleading schemes are pursuing the goal to scare you into buying Extra Antivirus full version and thus provide income to the fraudsters who developed it. Avoid Extra Antivirus at all costs. Remove this rogue anti-spyware ASAP if detected! It slows down the target computer and makes it vulnerable.

Malware Type: Rogue Anti-Spyware

Malware Author: dreamakerlab

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Extra Antivirus Free Scanner and Remover: Download Now

Extra Antivirus Screenshot:

How to remove Extra Antivirus manually:
Manual removal of Extra Antivirus is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\All Users\Application Data\7c69f0c
• %Documents and Settings%\All Users\Application Data\7c69f0c\57.mof
• %Documents and Settings%\All Users\Application Data\7c69f0c\ExtraAV.exe
• %Documents and Settings%\All Users\Application Data\7c69f0c\RootSys
• %Documents and Settings%\All Users\Application Data\7c69f0c\RootSys\vd952342.bd
• %Documents and Settings%\All Users\Application Data\RootSys
• %Documents and Settings%\All Users\Application Data\RootSys\extrav.cfg
• %UserProfile%\Application Data\Extra Antivirus
• %UserProfile%\Application Data\Extra Antivirus\Instructions.ini
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Extra Antivirus.lnk
• %UserProfile%\Desktop\Extra Antivirus.lnk
• %UserProfile%\Recent\ANTIGEN.sys
• %UserProfile%\Recent\cb.exe
• %UserProfile%\Recent\delfile.drv
• %UserProfile%\Recent\delfile.sys
• %UserProfile%\Recent\exec.dll
• %UserProfile%\Recent\fix.dll
• %UserProfile%\Recent\hymt.exe
• %UserProfile%\Recent\PE.dll
• %UserProfile%\Recent\PE.sys
• %UserProfile%\Recent\SICKBOY.sys
• %UserProfile%\Recent\sld.sys
• %UserProfile%\Recent\SM.sys
• %UserProfile%\Recent\std.drv
• %UserProfile%\Recent\tjd.exe
• %UserProfile%\Start Menu\Extra Antivirus.lnk
• %UserProfile%\Start Menu\Programs\Extra Antivirus.lnk

The associated registry entries to be removed are as follows:

• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\ExtraAV.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “889809903″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Extra Antivirus”

Please, be informed that manual removal of Extra Antivirus is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Extra Antivirus which will save your time and enable avoiding any system malfunctions and guarantee the needed result.