Article by George Norman

On 19 Oct 2009

For the second time today we report on the release of yet another rogue security software application from the Winisoft family of rogues. Earlier today we covered rogue antispyware application SecureShield; now we cover rogue antivirus program TRE Antivirus. Here is what you need to know about this piece of software, in brief:

• It does not look like your typical Winisoft rogue because the GUI (Graphical User Interface) has been changed.
• TRE Antivirus is distributed by Trojans, in a manner that goes something like this: the user visits a malicious webpage -> when he wants to view a video, he is informed that a Flash update is required -> he is invited to download the update (which is actually the Trojan that will install TRE Antivirus covertly).
• The Trojan will install TRE Antivirus on the user’s computer without the user’s consent. It will set TRE Antivirus to automatically run at startup, it will create numerous (harmless) files and it will display tons of popups and security alerts. It will even display a window that resembles Security Center – here it will recommend TRE Antivirus be downloaded and installed.
• When the user boots up the computer, he is welcomed by TRE Antivirus and the fake system scan it performs. The scan will detect numerous infections – these are in fact the files the Trojan created earlier.
• TRE Antivirus will not remove the infected files unless the user purchases a license first. Keep in mind that TRE Antivirus cannot detect, remove and protect against malware. It is all nothing but a scam, so keep your money in your pockets. Remove TRE Antivirus as soon as possible!

Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating TRE Antivirus from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.

Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).

Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:



- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.



- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.



- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.



- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.















Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for TRE Antivirus will complete swiftly.



Malwarebytes’ Anti-Malware will start scanning your files for signs of TRE Antivirus. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.



When the scan for TRE Antivirus is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.





Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.



Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of TRE Antivirus should be left on your computer.

Manual removal guide

Using Task Manager, shut down and remove the processes:



Access the Windows Registry Editor and delete the following registry keys:



Locate and delete the following files:



Disable the following DLL libraries:



Locate and delete the following folders:



Tags:

I Hope you LIKE this blog post! Thank you!

What do YOU have to say about this

Popular Removal Guide

1.

2.

3.

4.

5.

6.

7.

8.

9.

10.

11.

12.

13.

14.

15.

16.

17.

18.

19.

20.

21.

22.

23.

24.

25.

26.

27.

28.

29.

30.