Information about Earth AV
Earth AV is a fake antivirus program that is distributed to computer systems through the active use of Trojan viruses. The program is designed in order to swindle away computer users’ money. The Trojan not only downloads and installs Earth AV but also configures it to start automatically when computer is rebooted.
Then Earth AV runs a system scanner and reports about tons of malicious files that supposedly have been detected during system scan. In order to remove them, you are offered to purchase a full version of Earth AV program. However, that is not the right decision to make. Earth AV doesn’t exist as a security tool. It’s just one more infection reaching for your money.
While Earth AV is running on the system it also generates tons of fake security notifications and pop up ads reporting about infections and pushing to activate Earth AV. That is simply one more trick to convince you into paying for Earth AV.
You should get rid of Earth AV as soon as you notice its existence on your computer. in case you have also paid for it, please contact your credit card company and dispute the charges. Do not increase income of cyber criminals by voluntarily paying for rogue programs.
Parasite images
Earth AV Facts
- Earth AV pretends to increase security of your PC
- Earth AV free version will show popups, alerts and fake results to convince you to pay
- Earth AV creators will not deliver license keys upon paying or the full version will not be functional
- Earth AV might be used to download and advertise other malicious software
- Earth AV might disable some of your PCs or its programs functions
Manual Earth AV removal instructions
ErV_paid.exe
eav.exe
msdl.exe
vec.exe
ErV_paid.exe
eav.exe
msdl.exe
vec.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Earth AV”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Earth AV
HKEY_CURRENT_USER\Software\EAV
HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
HKEY_CLASSES_ROOT\AppID\WStech.DLL
HKEY_CLASSES_ROOT\CLSID\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
HKEY_CLASSES_ROOT\WStech.WStechB
HKEY_CLASSES_ROOT\WStech.WStechB.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mxcll"
%Documents and Settings%\All Users\Desktop\Earth AV.lnk
%Documents and Settings%\All Users\Application Data\Earth AV
c:\Documents and Settings\All Users\Application Data\eav
c:\Documents and Settings\All Users\Application Data\eav\Base.dat
c:\Documents and Settings\All Users\Application Data\eav\msdl.exe
c:\Documents and Settings\All Users\Application Data\eav\msll.exe
c:\Documents and Settings\All Users\Application Data\eav\vec.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Machine
c:\Documents and Settings\All Users\Application Data\Microsoft\Machine\WStech.dll
c:\Documents and Settings\All Users\Start Menu\Programs\ Earth AV
c:\Documents and Settings\All Users\Desktop\ Earth AV .lnk
%APPDATA%\mozilla\firefox\profiles\\gsl.dll
ergui.exe
ErV_paid.exe






No comments yet

