By George Norman
Added on 19 Feb 2010(941 Views)



classification: Rogue AntiSpyware Programs
Software Antivirus, unlike what the name may suggest, is not a security software solution nor is it an antivirus program. Software Antivirus is nothing more than a rogue – one that will most likely be installed by a Trojan without your consent. The Trojan that installs Software Antivirus will set it up so that the rogue automatically runs at startup (when you boot up your computer).
Once up and running, Software Antivirus will use various scare tactics to trick you into thinking your system is infected. The scare tactics employed by Software Antivirus include the following:
  • Fake system scans – the rogue runs these scans at startup; they maliciously flag numerous files as infected.
  • Popups and phony security alerts – these alerts state the computer is infected, or under attack, or something similar.
  • Browser hijacking – you will be directed to malicious sites, prevented from accessing certain sites, and so on.

There is a more devious reason behind these scare tactics. Besides tricking you into thinking your system is infected, they are meant to push you to purchase a Software Antivirus license. The rogue, after telling you your system is infected, offers to remove the infection. But not free of charge; you have to purchase a license first. Do not pay for a thing! Remove the rogue from your system instead.

Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating Software Antivirus from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.

Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).

Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:



- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.



- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.



- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.



- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.















Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for Software Antivirus will complete swiftly.



Malwarebytes’ Anti-Malware will start scanning your files for signs of Software Antivirus. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.



When the scan for Software Antivirus is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.





Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.



Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of Software Antivirus should be left on your computer.

Manual removal guide

Stop and remove the processes:

SA95e.exe
cb.exe
eb.exe
ppal.exe


Access the Windows Registry Editor and delete the following registry keys:

HKEY_CLASSES_ROOT/ReleaseXP.DocHostUIHandler
HKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Internet Settings/5.0/User Agent/Post Platform "986707143803"
HKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Run "Software Antivirus"


Locate and delete the following files:


c:/Documents and Settings/All Users/Application Data/52d54/SA95e.exe
c:/Documents and Settings/All Users/Application Data/SAYSSSys/sayss.cfg
%UserProfile%/Application Data/Microsoft/Internet Explorer/Quick Launch/Software Antivirus.lnk
%UserProfile%/Application Data/Software Antivirus/cookies.sqlite
%UserProfile%/Desktop/478.mof
%UserProfile%/Desktop/mozcrt22.dll
%UserProfile%/Desktop/sqlite5.dll
%UserProfile%/Desktop/Software Antivirus.lnk
%UserProfile%/Desktop/SAYSS.ico
%UserProfile%/Desktop/SAYSSSys/wr612477.bd
%UserProfile%/Recent/ANTIGEN.tmp
%UserProfile%/Recent/cb.exe
%UserProfile%/Recent/cid.dll
%UserProfile%/Recent/CLSV.tmp
%UserProfile%/Recent/DBOLE.sys
%UserProfile%/Recent/ddv.dll
%UserProfile%/Recent/eb.drv
%UserProfile%/Recent/eb.exe
%UserProfile%/Recent/eb.sys
%UserProfile%/Recent/energy.sys
%UserProfile%/Recent/fan.drv
%UserProfile%/Recent/FS.drv
%UserProfile%/Recent/hijackthis.log.lnk
%UserProfile%/Recent/PE.drv
%UserProfile%/Recent/PE.tmp
%UserProfile%/Recent/ppal.exe
%UserProfile%/Recent/runddlkey.drv
%UserProfile%/Recent/tempdoc.tmp
%UserProfile%/Start Menu/Software Antivirus.lnk
%UserProfile%/Start Menu/Programs/Software Antivirus.lnk


Unregister the following DLL libraries:

mozcrt22.dll
sqlite5.dll
cid.dll
ddv.dll




Don't forget to:

Tags:

Link to this article:



Add comment:
Name(Required)
Email(Required - Never shown)
Website(Optional)
Comment(Required):

Insert the following code:
Removal Guide Articles
How To Remove XP Micro Antivirus
If you did not manually install XP Micro Antivirus and ...
19 Feb 2010
How To Remove Software Antivirus
Software Antivirus, unlike what the name may suggest, is not ...
19 Feb 2010
How To Remove WiniFighter
The irony here is that the name WiniFighter would lead ...
19 Feb 2010
How To Remove PC Security 2009
PC Security 2009, a rogue antispyware program, is usually distributed ...
19 Feb 2010
How To Remove Security Essentials 2010
The people with malicious intent that put out the ...
18 Feb 2010
How To Remove Personal Anti Malware
Personal Anti Malware, a rogue security software application, is usually ...
18 Feb 2010
Recommended Tools

Top Downloads