Remove Avira AntiVir Enhanced Protection Mode hypocritical virus

Malware Description:
There is an ongoing malware campaign that astonishes even those who have seen many viruses. This time, the virus distributors ventured to spread rogue security software that imitates some of the dominating legitimate utilities. What is more, not only do these recent scarewares mimic the behavior of antivirus tools, they also take after the corresponding names. Just check it out – the rogue’s name is Avira AntiVir Enhanced Protection Mode. Recognize anything familiar in the denomination? You betcha, the pest sounds like a part of the vast and reliable Avira family but beware – it’s in no way related to the real vendor. The basic information on this rogue anti-spyware is it’s propagated through social networks, Facebook mainly. Users get an unannounced message about something interesting that lures them into pushing a link leading to the allegedly interesting or pseudo sensational content. This is how Avira AntiVir Enhanced Protection Mode actually gets on your PC. The trojan determines what security solution you are using and then accommodates to this by acquiring the respective name. The victim starts getting popup messages reading: “Attention! Avira AntiVir operates under enhanced protection mode. This is a temporary measure necessary for immediate response to the threat from a virus. No action is required from you”. Actually, the very last sentence of the alert’s text is hypocritical in a way because the badware will be sure to insist shortly that you purchase its licensed version. Please do not pay for Avira AntiVir Enhanced Protection Mode scam and do your best to get rid of this fraud.

Malware Type: Rogue Anti-Spyware

Severity Level: Critical

Advice: Immediately remove and scan for additional malware

Avira AntiVir Enhanced Protection Mode Free Scanner and Remover: Download Now

Avira AntiVir Enhanced Protection Mode Fake Alert Screenshot:

Avira AntiVir Enhanced Protection Mode Fake Alert

How to remove Avira AntiVir Enhanced Protection Mode manually:
Manual removal of this malware is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %WINDOWS%\ddh_iplist.txt
  • %WINDOWS\front_ip_list.txt
  • %WINDOWS\geoiplist
  • %WINDOWS\iecheck_iplist.txt
  • %WINDOWS\info1
  • %WINDOWS\iplist.txt
  • %WINDOWS\l1rezerv.exe
  • %WINDOWS\phoenix
  • %WINDOWS\phoenix.rar
  • %WINDOWS\proc_list1.log
  • %WINDOWS\rpcminer.rar
  • %WINDOWS\services32.exe
  • %WINDOWS\sysdriver32.exe
  • %WINDOWS\sysdriver32_.exe
  • %WINDOWS\systemup.exe
  • %WINDOWS\ufa
  • %WINDOWS\ufa.rar
  • %WINDOWS\unrar.exe
  • %WINDOWS\update.1
  • %WINDOWS\update.2
  • %WINDOWS\update.5.0
  • %Temp%\[random].exe

The registry entries that need to be removed are as follows:

  • HKEY_LOCAL_MACHINE\Software\Avira AntiVir Enhanced Protection Mode
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Avira AntiVir Enhanced Protection Mode”

Please be aware that manual removal of Avira AntiVir Enhanced Protection Mode is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Avira AntiVir Enhanced Protection Mode, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Avira AntiVir Enhanced Protection Mode Automatic Remover

Like This Article? Let Others Know!

Post a Comment: