Personal Antivirus

Having Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. » Download

Pc Ninja can remove this virus for you for a very low price.

» Download Personal Antivirus Removal Software

Personal Antivirus is one of the most prolific Smitfraud clients out there right now.  This bogus security client does not seem to be dying off any time soon.  However the good news out of this is most security clients are now able to detect and block this client on the front end so most people are being protected from this.

If you ended up getting infected then either you did not have active protection or the program you were using for defense was not good enough.

In many cases people get infected with Personal Antivirus from a fake video program, video update or video patch.  This seems to be the main reason for infections.  However if you did not install any thing or do anything to your knowledge and this program just showed up one day then chances are you were infected with a TrojanDownloader program.  These are some of the worst types of viruses to be infected with .  Once infected the downloader program does just that.  It reports to it’s maker and downloads whatever package the person has waiting for it.

These types of trojans go out and download Smitfraud clients as well as several other viruses as well. That is why you will need to run a scan with Spyware Doctor with Antivirus. While the un registered version will not remove any threats it will block any threats from re-installing while you manually remove this bogus software. It is also needed to identify what else you may be infected with and to show you the exact path and files names that need to be deleted. These strains change all the time and having this tool is a big help. If you intend on making a purchase then just register the product and hit the remove button and your done.

Manual Removal of Personal Antivirus:

Step 1. You need to end the Antivirus Pro 2010 program. Open the Task Manager ( ctrl+alt+del ) and end the process PAV.exe, if this process is not there then your strain has mutated from the one this guide is for. It should be similar in name. You can run a quick scan with Spyware Doctor with Antivirus to identify the new process as well.  If you can not open the task manager then try to run the Kill process tool on the side bar of this site.  If no programs can run then we found a hat trick that works on the strain we removed.  Right click on the Personal Antivirus icon on the desktop and select properties.  There you will see the full path to were the program is on your computer as well as the running process that starts this client.  Most likely it is c:\Program Files\PersonalAV\ or something very close to that.  Now re-name the .exe file.  for instance our process was named PAV.exe,  re-name it to pavasd.exe or something like that.  Now re-boot the computer and go ahead and remove the file.  It should work well for you.

Step 2. Delete all the Personal Antivirus  files. The location of this program in our test was c:\Program Files\PersonalAV\. We have also seen it be c:\Program Files\PAV\ and in %UserProfile%\Application Data\Personal Antivirus. Open up that folder and delete anything inside it. If a file can not be deleted use the task manager to see if it is running. If the Task Manager does not see it running then try to re-name the file. Then keep in mind the location path and on the next re-boot delete the file.

Step 3. Delete the rest of the trace files from your computer.  Here is a list we found on the Spyware Doctor with Antivirus scan.  Keep in mind your traces may be different and that is why you will need to run a scan.

• %UserProfile%\Application Data\Personal Antivirus\settings.ini
• %UserProfile%\Application Data\Personal Antivirus\uill.ini
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus\db
• %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
• %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
• %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Step 3. We are going to be editing the registry and removing the Personal Antivirus  strains. Go to the run bar and type regedit. Now find and delete the following registry keys.

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

That should be it for this strain. If you are having issues and can not get programs to run like the Task Manager then try the Kill Process tool in the side bar. You still need to run a Security scan to ensure you have no other threats on your computer. We use Spyware Doctor with Antivirus because it works really well.

We should also note that this site recommends www.onlinecomputerrepair.org for a removal service.  Many sites out there do recommend them because they are one of the best and cheapest places to get your computer repaired online.  Even if you don’t use them for this it’s worth bookmarking because some day you will need them.