Home > Threats > AVCare

What is AVCare

Posted on 22 September 2009 under Rogue Programs

1. What is AVCare?

This fake computer security program belongs to a class of rogues. The program is considered as a fraudulent because of its ability to deceive user and force him into buying inefficient tool. AVCare is also known as a scareware for:

its multiple and fraudulent warning messages about computer infections (Remote Attack Alert, Security Center Alert, Your system is infected);

exaggerated computer scan report, which contains well known virus names under legitimate Windows system files.

any Remove Now!, Register Now or Activate protection button activation will lead towards fake product purchase.

All of above mentioned AVCare behaviour is a scam and should not be trusted.

AVCare is configured so that it will launch main malicious process and start computer scan each time operating system is booted.

2. AVCare screen shot:

AVCare

3. How to remove AVCare:

  1. Internet connection might be disabled or Internet browser might be blocked by AVCare, so it won't be possible to download any files to infected computer. In this case please download all files required for AVCare removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove AVCare download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove AVCare.

  5. Restart the computer to complete AVCare removal procedure.

4. AVCare files:

AvCare.exe

5. Hijackthis entries:

O4 - HKCU\..\Run: [AV Care] C:\Program Files\AV Care\AvCare.exe