Home About us Malwarebytes Spyware Doctor Threats Contact us
Home > Threats > WinAntiVirus Pro

What is WinAntiVirus Pro

Posted on 30 April 2008 under Rogue Programs

1. What is WinAntiVirus Pro?

WinAntiVirus claims to repair personal computer, but it it not able to do that. Each time the Windows are started security alerts appears trying to persuade user to buy commercial program version to clean the infections. WinAntiVirus Pro slumps computer performance.
Other names of WinAntiVirus Pro: WinAntiVirus Pro 2006, WinAntiVirus Pro 2007.

2. WinAntiVirus Pro screen shot:

WinAntiVirus Pro

3. How to remove WinAntiVirus Pro:

  1. Internet connection might be disabled or Internet browser might be blocked by WinAntiVirus Pro, so it won't be possible to download any files to infected computer. In this case please download all files required for WinAntiVirus Pro removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove WinAntiVirus Pro download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove WinAntiVirus Pro.

  5. Restart the computer to complete WinAntiVirus Pro removal procedure.

4. WinAntiVirus Pro files:

compwiz.exe, dc6_startupmon.exe, DNSE.exe, ers_startupmon.exe, fat.exe, FWSvc.exe, mav_startupmon.exe, rtasks.exe, uwa6pcw.exe, uwa7pcw.exe, WinAntiVirusPro2006Installer.exe, WinAntiVirusPro2006Installer[1].exe, WinAV.exe

5. Hijackthis entries:

O4 Entries:
O4 - HKLM\..\Run: [CompanionWizard] "C:\Program Files\Common Files\Companion Wizard\compwiz.exe" /silent
O4 - HKLM\..\Run: [DC6] "C:\Program Files\Common Files\dc6_startupmon.exe"
O4 - HKLM\..\Run: [DC6_check] "C:\Program Files\Common Files\dc6_startupmon.exe"
O4 - HKLM\..\Run: [DNSE] "C:\Program Files\Common Files\WinAntiVirus Pro 2007\DNSE.exe" -c
O4 - HKLM\..\Run: [ERS] "C:\Program Files\Common Files\ers_startupmon.exe" /min
O4 - HKLM\..\Run: [ERS_check] "C:\Program Files\Common Files\ers_startupmon.exe"
O4 - HKLM\..\RunOnce: [fat.exe] "C:\Program Files\WinAntiVirus Pro 2006\fat.exe"
O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAntiVirus Pro 2007\mav_startupmon.exe"
O4 - HKLM\..\Run: [MAV_check] "C:\Program Files\Common Files\WinAntiVirus Pro 2007\mav_startupmon.exe"
O4 - HKLM\..\Run: [rtasks] C:\Program Files\WinAntiVirus Pro 2007\rtasks.exe
O4 - HKLM\..\Run: [uwa6pcw] "C:\Program Files\Common Files\WinAntiVirus Pro 2006\uwa6pcw.exe" -c
O4 - HKLM\..\Run: [uwa7pcw] "C:\Program Files\Common Files\WinAntiVirus Pro 2007\uwa7pcw.exe" -c
O4 - HKLM\..\Run: [WinAntiVirusPro2006] "C:\Program Files\WinAntiVirus Pro 2006\WinAV.exe" /min
O4 - HKLM\..\Run: [WinAntiVirus Pro 2007] C:\Program Files\WinAntiVirus Pro 2007\WinAv.exe /min
O23 Entries:
O23 - Service: Firewall service (FWSvc) - WinSoftware, Ltd. - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe