Category: Personal Antivirus

SuperAntiSpyware and PAV.EXE — How to Remove it

Paul3 Replies

personalantivirus3

[ad]If your noticed a new program on your system called PAV.exe, the filename is usually associated with [intlink id=”3607″ type=”post”]Personal Antivirus Scareware Site[/intlink].    The interesting fact is that most of the time this is installed silently and should be removed Immediately.   The Good news SUPERAntiSpyware can block and remove PAV.EXE and thousands of other harmful applications.  So if you have this fakeware or I call it scareware, maybe it is time to buy SuperAntiSpyware Professional which comes with Realtime Blocking of threats! Prrevent potentially harmful software (spyware, adware, worms, dialers, hijackers, keyloggers)  from installing or re-installing.

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

How to know if the scareware warning is real or not:

Paul

I got an email from someone who wants not to be named asking how do I know if these sites that I have talked about like Defenderpageblock.com, Spywaredomainlist.com, adwaredomainlists.com, badwaredomainlists.com, browserdefenderlist.com,  malicioussitesblock.com, and browserliveprotection.com are fake warning sites because of how the site handles the URL presented.   Let me give you a few example urls to see what I mean:

http://defenderpageblock.com/block.php?id=2006-54&url=http://paulstechtalk.com/scareware-adviser-from-defenderpageblock-com/

http://browserliveprotection.com/block.php?id=2024-4&url=http://paulstechtalk.com/2008/12/microsoft-readys-to-layoff-around-15000-workers.html/

http://malicioussitesblock.com/block.php?id=2006-54&url=http://paulstechtalk.com/2009/08/list-of-malware-sites-for-aug-24-2009.html/

http://spywaredomainlists.com/block.php?id=2018-2&url=http://paulstechtalk.com/2009/08/scareware-adviser-from-spywaredomainlists-com.html/

http://adwaredomainlists.com/block.php?id=2031&url=http://paulstechtalk.com/2009/04/pc-speedscan-pro-a-bad-idea.html/

Now as you can see al these have an identification number probably like an affiliate link and then the url of the site that is supposed to be bad or have malicious in some way.  So what do you do when you see these types of warning pop up and you would like to know if this real.   Here are some things to try to see if it is real or not:

 

  • change the url it is going to, try Google or some other site that you know isn’t malicious and see what happens.   You will notice it will say the same exact same thing.
  • Check out Stopbadware.org —  Google uses this service for there search results so this would be more reliable and check out the warning domain to see what it says then also check out the domain and website in question.
  • Check out Phishtank.com —  Firefox likes to use this resource for reporting fraud, fake, or Phishing sites and also for sites that are dangerous to  the people who use Firefox.

 

Most of the time, you will see this happen when you are search for the site like Defenderpageblock.com it will use a key word and pop up because they don’t want you to remove this scareware or sometimes called badware.   So if you do a search for the site that keeps popping up and you click on a link the site in question will sometimes try to prevent you from figuring out how to remove it.    All these sites mentioned are associated one way or another to Personal Antivirus Scareware Site and should be removed.

So if your getting these types of warnings, I would recommend downloading:

Fake Antivirus List for Aug 30, 2009

Paul

personalantivirus3
[ad#Google 486×60]

Looks like the Malware authors are hitting the domains hard today getting ready for the first of the month, so please be careful!!

[intlink id=”3607″ type=”post”]Personal Antivirus Scareware Sites[/intlink]:

  • awardantivirusscan.com

  • worldsbestscanner.com

  • antispyware-scanner5.com

[intlink id=”4217″ type=”post”]Internet Antivirus Pro Scareware[/intlink] sites:

  • viruskill2009.com

  • copien.info

  • ireful.info

[intlink id=”3977″ type=”post”]Rogue Antivirus scareware sites[/intlink]:

  • moreserials.com (Systemsecurity)

  • safetydefender.net (Windows Security Suite)

  • gosearchsecurity.net (Windows security Suite)

  • qesoft.info (Windows Security Suite)

  • itgosearch.net (Windows Security Suite)

  • realsystemguard.com (Windows Security Suite)

  • visualsecuritysupply.com (Windows Security Suite)

  • avonlineprotection.com (Fake Scanner Page)

  • blockdefense.com (Rogue Spyware)

  • my-green-av.com (Rogue AV)

  • green-av.com (rogue AV)

  • avsolutiondwn.info (Rogue AV)

  • progresivescan.info (Fake Scanner Page)

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

Malware Domain List for Aug 28, 2009

Paul

personalantivirus2

[ad#Google 486×60]

This is going to be a small list like [intlink id=”4325″ type=”post”]yesterday which was small also[/intlink] but if there is more you know I will post it.

[intlink id=”3607″ type=”post”]Personal Antivirus Scareware Sites[/intlink]:

  • antivirus-online-scan5.com

  • remove-pc-spyware.com

[intlink id=”4217″ type=”post”]Internet Antivirus Pro Scareware[/intlink] sites:

  • prarie.info

[intlink id=”3977″ type=”post”]Rogue Antivirus scareware sites[/intlink]:

  • savedefense.com

  • mitrodermo.com

  • seritrupik.com

  • great-pcprotect.com (fake scanner page)

  • scan.howtosecurepcs.com (Fake scanner page)

  • dl.howtosecurepcs.com (Fake Spyguard)

  • a2tv.org (Fake Codec, installs fake AV)

[ad#Scarewaresitesrecommend]

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]

Scareware Adviser from Defenderpageblock.com

Paul

Defenderpageblockcom

So the first question is how do I know this is a fake site warning. Well I did my research I went to Phishtank.com and check to see if my URL was being blocked. I also clicked the link to see what this link went “Activate my Web protection software”.

[ad]This site now matter how real looking is a URL Hijacker and is what we call a scareware Sponsor for Personal Antivirus Scareware Site and if your getting this screen it is time to get get Rid of it. You can check out the others like SecurityBrowseradviser.com it is exactly the same.

These sites gets installed in unsuspecting computers by way of exploits, backdoors, Trojans, or unsafe downloading practices. This usually means that if you have it you should remove it by any means necessary because this software has been know to cause more and more trouble as time goes by. This software is fake ware, it tries to tell you have a virus and that they can get rid of it. In fact, this software is not designed with Antivirus engine in it but to illicit pop ups and warning to raise the users security concerns about the computer in question. Downloading programs from bit torrents or other unsafe ways can and most likely will have these types of programs installed alongside the program you wanted.

Threat to System : Critical

[rating:4/5]

[ad#Scarewaresitesrecommend1]

[ad#SUPERAntiSpyware]