AntiVirGear Removal Instructions

65 Responses to “AntiVirGear Removal Instructions”

1. 1

   Mathew Says

   I’ve successfully removed this stupid AntiVirGear after I followed the instructions. One thing I like to add is that you have to BACKUP the registry before you go further. This is very important!! It saved my day by doing so otherwise it would have been a disaster when I accidentally delete the wrong registry keys.

   Sep 13th, 2007 at 10:16 pm   

2. 2

   Donnie Says

   Put these people who created this nasty thing in jail!!! Why would they enter my computer without my permission?

   Sep 14th, 2007 at 8:18 pm   

3. 3

   T.O. Says

   thanks for the info. it really helps…

   Sep 15th, 2007 at 8:49 am   

4. 4

   mary Says

   How can I remove this if my computer keeps restarting windows every 15 seconds
   I can not download anything!!

   Sep 15th, 2007 at 10:16 am   

5. 5

   Brian Says

   Mary, have you tried Safe Mode? Maybe you can simply restore to the previous configuration before you use the instructions or download the utility.

   Sep 15th, 2007 at 11:07 am   

6. 6

   Rosa Says

   I was stupid enough to click on something that I wasn’t supposed to click and now my machine is running like a piece of cr*p. I followed the Antivirgear removal instructions but I am not computer-literate. I don’t know understand most of terms here and I have no ideas how to get to the registry. Can somebody offer some help? By the way, I am running Windows XP.

   Sep 17th, 2007 at 10:35 am   

7. 7

   Vivean Says

   Hello friends,

   The instructions given in this blogs are really good. it helped me a lot to remove the AntiVirGear with also removing the unwanted “System Alert” . Thanks for the instructions and keep up the good work.
   Good Job
   Vivean

   Sep 20th, 2007 at 7:11 am   

8. 8

   Jason Says

   AntiVirGear Updated, here are three new dll’s that need to be deleted;
   lgaac.dll
   txxkb.dll
   iheuv.dll

   Sep 20th, 2007 at 10:42 am   

9. 9

   guido Says

   Thanks a lot! This utility worked great to remove antivirgear.

   Sep 21st, 2007 at 10:39 am   

10. 10

    Mohamed Says

    Help Please! I was able to remove AntiVirGear program, But I still have that annoying “system alert” pops up. I have searched all of the .dll files but did not find any, I also got this Virus from a fake Active X download. Any suggestions out there?

    Sep 21st, 2007 at 11:24 am   

11. 11

    Jose Says

    Thank Jason. In my case i found C:\WINDOWS\system32\lgaac.dll on my computer, deleted lgaac.dll and the whole folder C:\Program Files\AntiVirGear 3.7, and the AntiVirGear popup are gone.

    Thanks,
    Jose.

    Sep 22nd, 2007 at 8:51 am   

12. 12

    William Says

    I have this AntiVirGear virus on my Windows Vista Home Basic. The virus keep popping up after I install an ActiveX installer, pop up keep coming up every 5 seconds, it is impossible to use the explorer and control panels… Any ideas, anyone?

    Sep 22nd, 2007 at 9:13 am   

13. 13

    Brian Says

    William, as many have suggested, you might be able to work around this in Safe Mode. Safe Mode means Vista would run with minimum processes and drivers. After you boot in to Safe Mode, just follow the manual instructions and you should be fine. Good luck!

    Sep 22nd, 2007 at 12:25 pm   

14. 14

    Alex Says

    Well, sorry if this sound stupid, but how can I edit the registry without any computing knowledge? I don’t want to screw up my PC, and I don’t want to pay for Geek Squad. Help! Any helps will be greatly appreciated!

    Sep 22nd, 2007 at 2:27 pm   

15. 15

    Brian Says

    Alex, I would suggest you not to touch the registry unless you are absolutely sure what you are doing. The manual removal instructions are in plain English and don’t require a lot of experience with PC’s. However, if you don’t understand it thoroughly, I would recommend you to seek helps from your peers. I am pretty sure that you can find someone who’s familiar with this since it’s not uncommon to work with the computers nowadays. The last resort would be buying a removal tool such as Spyhunter since they offer customized free support if the software doesn’t remove the spyware thoroughly. Of course, as always, I suggest you to try the manual instructions first since it’s free. Hope this helps. Good luck!

    Sep 22nd, 2007 at 2:49 pm   

16. 16

    biglarry Says

    Thanks for the help to all who posted to this forum. By finding this site and reading the posts I was able to remove that stupid antivirgear 3.7 garbage. Larry

    Sep 22nd, 2007 at 3:58 pm   

17. 17

    Tim Says

    Here are two more dll’s from AntiVirGear; pluwue.dll and zdhgsp.dll.

    Sep 23rd, 2007 at 10:29 am   

18. 18

    Jack Says

    I’ ve found “lgaac.dll”, but it’s impossible to delete it. What do I have to do? Please, help!

    Sep 23rd, 2007 at 3:11 pm   

19. 19

    Brian Says

    Jack, rename “lgaac.dll” to “lgaac.doc” then move to your desktop, after this, reboot then delete “lgaac.doc” from your desktop. This works for a lot of people and you might want to give it a try. Good luck!

    Sep 23rd, 2007 at 4:38 pm   

20. 20

    Brad D. Says

    I bought AntiVirGear then realized that it’s a fake antispyware software. I know I should’ve googled it first!!! I tried the instructions but does not seem to remove AntiVirGear completely. My computer freezes as soon as I open up explorer and I can’t go further. And I can’t boot into Safe Mode!! What else can I do? Do I have to reformat the hard drive? I don’t want to lose my data. Help!!

    Sep 23rd, 2007 at 10:13 pm   

21. 21

    Indianapolis Says

    Thank you very much for the info. Symantec and McAfee didnt have a clue how to remove this manually. The file wqzdtjg.dll = the tray icon. Without this article I would still have the icon flashing on a clients laptop. Thanks again

    Sep 24th, 2007 at 10:02 am   

22. 22

    Somashekar Says

    Tried all the options mentioned. Especially I was able to delete “lgaac.dll” by renaming it to doc file. Thanks for this. But still I have the problem. Still there are pop-ups, and whenever I open the IE browser, I’m able to find the same garbage (AntiVirGear Information. It is opening some http:/safetysettings.com website!)

    How do I get rid of this?

    Also want to know whether there are any serious threats due to the presence of this stuff on my system? My friend complained that he recieved series of emails from me (which I didn’t send him).

    Let me know the seriousness of this problem…

    Sep 24th, 2007 at 10:48 am   

23. 23

    Tim Says

    Here is another dll from AntiVirGear; jrpkmgh.dll

    Sep 24th, 2007 at 4:03 pm   

24. 24

    Tim Says

    In my case, I printed off all of your instructions, went through manually and did a search and could not find any of the files shown….any suggestions? I still have the Antivirgear sales gimmick popping up

    thanks, tim

    Sep 25th, 2007 at 11:32 am   

25. 25

    Tim Says

    Tim,
    Try to find rnxwph.dll, this is the latest file from AntiVirGear.

    Sep 25th, 2007 at 12:18 pm   

26. 26

    Mr. J Says

    Thanks for the tips. Without this solution, I would have to buy a new laptop for my wife. Keep up the good works!

    Sep 25th, 2007 at 9:07 pm   

27. 27

    ram Says

    could i just run spyhunter to get rid of it?

    Sep 26th, 2007 at 5:28 am   

28. 28

    Steve Says

    Mohamed,
    I had the same problem because I was searching for recent files. When I broadened the search to include all files I found the zdhgp.dll file. It showed it was modified back in 2002.
    I started by searching for recent .dll files and found the rest easily.
    I am not the best with computers but was able to get rid of the virus by finding and deleting the files listed on this site.
    Thanks for everyone’s help.

    Sep 26th, 2007 at 1:34 pm   

29. 29

    Raghu Says

    Dear Sir,
    I could not able run the program please help me out to delete trhe virus called antivergear .

    Sep 26th, 2007 at 9:58 pm   

30. 30

    Gervis Says

    Happy to leave this one. After reading some of the posts, I decided to try some of the fixes. First instead of typing the filename in search I copied them from the removal instructions on the net less danger of typo’s. I did find jrpkmgh.dll then following Tine’s fix in the file found window of search, I renamed it to .doc, rebooted and went to Windows/System folder and deleted it. The annoying little red shield is gone! Thanks all and especially Tine.

    Sep 26th, 2007 at 11:26 pm   

31. 31

    Mo Says

    Hi all,

    i have had this bloody antivirgear for three days now. The information here is very useful. i managed to get rid of the virus more or less instantly but the stupid red shield pop up kept flashing. i used gervais advice and he was spot on with the file jrpkmgh.dll as soon as i searched it, avg recognised the file as a virus so i tried healing first and then i deleted it. BUT the little red shield has now turned into a speech bubble and i still get the same stupid pop up. Please HEEEEEELLPP!!!

    P.s. i am on a work computer

    Sep 28th, 2007 at 7:41 am   

32. 32

    dennis roberts Says

    Ihave tried removing all the dlls and followed the instructions but I still get the disgusting pop ups. I used Smitfraudfix and fixAVg and still no good. Any other ideas?

    Sep 28th, 2007 at 11:08 am   

33. 33

    EmmEye Says

    Hi Mo,
    When you have finished with getting rid of the executables and dlls and registry entries. just restarting will not do. You will continue to see that dirtly little menace popup periodically and you will not be able to associate a process to it to kill it.
    Try this… Restarting the computer may not help always. SHUT DOWN the computer. Put it off for a night and come back and start next day.

    Sep 30th, 2007 at 12:40 pm   

34. 34

    Vishal Thakkar Says

    Want to know how to remove that security alert ballon in right bottom..
    Coz after removing everything about antivirgear still this ballon not remove.

    Oct 5th, 2007 at 4:58 am   

35. 35

    Tim Says

    Vishal,
    Did you follow all the instructions above?
    also did you delete at least one of the dll above?
    If you did then try to reboot your computer, te ballon should be gone after reboot.

    Oct 5th, 2007 at 3:26 pm   

36. 36

    flyingtortoise Says

    I couldn’t find any of those dll’s and still I had the flashing shield in the corner of the screen. Also, I wasn’t sure of the genuineness of Spyhunter malware removal tool, so I downloaded ProcessExplorer, ran that and listed the threads running under explorer and found another dll, veptlh.dll, which looked suspicious. Sure enough, it’s associated with AntiVirGear. Getting rid of this seemed to solve the problem (thus far). Other dll’s mentioned elsewhere along with this one are:
    # hteogat.dll
    # hymww.dll
    # fifzqip.dll

    Oct 6th, 2007 at 2:31 pm   

37. 37

    Mackeith Says

    Here is the latest dll they hide under: flirek.dll. Good luck hunting it down and eliminating it

    Oct 6th, 2007 at 4:56 pm   

38. 38

    achu Says

    flirek.dll the ghost file which screwed my system happiness

    Oct 7th, 2007 at 9:48 am   

39. 39

    MDN Says

    Hello everyone,

    Thanks for all the good suggestions. My new Norton AV removed the antivirgear completely. When I went to look for all the dlls that have been listed by you all, I could not find any (in the unregistering DLLs step). However, I still have this annoying pop up that keeps coming up. When I try to delet it, it goes to the Antivirgear website. Any suggestions how I may stop the pop up?

    Oct 8th, 2007 at 9:09 am   

40. 40

    marc Says

    I can’t remove Antivirgear for my comp.I do everything what I found on this site,but nothing.Somebody can help me?I have this virus from 4 days.

    Oct 9th, 2007 at 3:28 pm   

41. 41

    jcdev Says

    I am still getting the alert pops too. I have found flirek.dll and tried to delete it, but I get the message “access denied” and unable to remove. I think the program is removed but the antivirgear home page comes up when I click the alert icon.

    Oct 10th, 2007 at 10:55 am   

42. 42

    ann Says

    Like others, I have had this for 2 days, cannot delete the Security Toolbar 7.1 on my screen. Any ideas? Cannot find it in the program list to delete. Thanks.

    Oct 10th, 2007 at 5:16 pm   

43. 43

    K Says

    I followed the directions above but still kept getting the annoying security pop ups, and my toolbar was still affected.

    I did a system restore to the previous day, and everything is back to normal.

    You can follow the instructions on the help menu.
    I have XP and from the start menu, click ‘help and support’, search for “system restore”, choose “run system restore wizard” and follow the instructions. Good luck!

    Oct 10th, 2007 at 10:27 pm   

44. 44

    MR fix it Says

    If you want to fix the problem download Windows LIVE OneCare. You will be done with it. Norton did not work or any of that other crap you find on the web! Been there DONE THAT!!!! Eliminate Antivergear!!

    Oct 11th, 2007 at 8:38 am   

45. 45

    marc Says

    Now it’s OK.Who still have problem with AntiVirGear alert icon in right corner,try to find veptlh.dll in totalcomander,rename it,and send on desktop.Restart computer and delete it with right clik-delete.Succes.

    Oct 11th, 2007 at 9:23 am   

46. 46

    Elio Nappi Says

    Please let me know the price of this Spy hunter

    Oct 11th, 2007 at 10:44 pm   

47. 47

    Brian Says

    I have gone into system32 and cannot locate wqzdtjg.dll firek.dll PLEASE HELP

    Oct 12th, 2007 at 5:08 am   

48. 48

    Tim O’Brien Says

    I went into c:\windows\pefetch and deleted antivirgear from there and that got rid of everything but the stupid blinking icon in the system tray. I’m not able to find any of the listed .dll files, but I found a file called AU_.EXE-2791DD94.pf.

    Oct 13th, 2007 at 10:37 pm   

49. 49

    Sys Says

    Do a system restore. Go in save mode, and when you are asked if you would like to continue in save mode, just click NO. Select a system restore point one day BEFORE you got infected.It worked for me.

    Oct 13th, 2007 at 11:43 pm   

50. 50

    Tim O’Brien Says

    There’s a new DLL that I found and it got rid of the system tray blinking warning. The DLL is called SIIYAL.DLL and is located in the C:WINDOWS/SYSTEM32 directory.

    Hope this helps,
    Tim

    Oct 14th, 2007 at 12:32 pm   

51. 51

    Sarah Says

    HELP ME!!! I got the AntiVirGear virus on our office computer and I am having trouble removing it…. its relentless and keeps re-appearing! S.O.S.

    Oct 16th, 2007 at 10:22 am   

52. 52

    Mark Says

    Ive got the virus off the computer but still can’t rid of the pop up!!!! aaaaarrrrrggghh!!! HELP!!

    Oct 17th, 2007 at 12:13 pm   

53. 53

    hh Says

    Yeah that bugs me

    Oct 17th, 2007 at 1:01 pm   

54. 54

    Jaymie Says

    I got the AntiVirGear off all except an icon in my toolbar that wont go away. It keeps poping up saying there is harmful spyware or system problems to click here. As you all know it takes me right back to that purchase the fake software pages. What can I do to remove it from my toolbar when my computer cant find it anywhere after running all your steps?
    Please help me…………

    Oct 17th, 2007 at 1:35 pm   

55. 55

    Craig Says

    BUY antivirus software you guys… I use AVG (full version) it was 100 dollars for a 2 year license. It has found and quarantined all of my harmful files with the click of a button. If you are running your pc on the net and are using free virus software you are only kidding yourself.

    Oct 17th, 2007 at 7:53 pm   

56. 56

    Khan Says

    Craig,

    Spent $$$ on Norton but no cigar. Norton swears that all’s well, but the darn pop-ups keeps on appearing.

    Any suggestions on any other software that can be purchased?

    Oct 18th, 2007 at 10:50 pm   

57. 57

    Dave Says

    I ran AVG, Norton, Spybot, Zone Alarm and HijackThis Spyware progams and nothing worked downloaded Spyhunter and POOF all gone, Thanks for the link!!! That Antivirgear is a bitch!!!

    Oct 24th, 2007 at 10:35 pm   

58. 58

    PC Guy Says

    If you know when you were infected a system restore would work. I still recommend running a trusted Spyware utility and an AntiVirus scan as well. I had one of my customers receive this. He only had it for a day prior to contact IT, so we were able to do a system restore. Ran spyware and a Virus scan. Things have been fine since.

    Oct 25th, 2007 at 9:29 am   

59. 59

    Steve Says

    Where to start. My GF told me she had this program running. I did a search and found my way here.

    We walked through all the steps and the only set that found anything is searching the computer for “AntiVirGear 3.8.exe” She deleted that and I know that isn’t going to remove the program. We searched through all the .dlls and didn’t find any.

    I did an internet search of all the programs running in her task manager and none of them turned up anything unless i missed it.

    The only place I have left to look is in the registry. Since I am not with her, I can’t look and I don’t want her to mess around with the registry. Can anyone offer some help as to what to do next?

    Oct 31st, 2007 at 12:53 pm   

60. 60

    Pat Says

    O.K. The annoying blinking thing at the bottom is gone but I am still getting random pops ups.What now do now? More searching and stuff?

    Nov 1st, 2007 at 2:33 pm   

61. 61

    J Says

    After downloading Windows Defender and running a full system scan, it seemed to find a few things to delete which were related. Also the Microsoft malicious software removal tool did the same. Both from Micriosoft website. However, the pop up and icon were still there. I tried what K suggested about system restore and this worked. If you dont know when it was infected like PC Guy says, download defender and go to Software Explorer and it shows all the startup programs and dates installed. The problem program should show at the bottom of the list with an exclamation mark icon, and will tell you the installation date on the right. Then try to run system restore prior to this as K says.

    Nov 11th, 2007 at 10:20 am   

62. 62

    Michael Says

    As others have described, I got infected with antivirgear. I used the sarc removal instruction and got everything out of the registry. I still got the blinking cursor and the website with it.

    I went to zdnet and found their best adware/spyware programs Adaware. I ran adaware personal and it did not remove the curser. Next I tried spyware doctor. Then I tried the AdwareAlert program. I was in the process of downloading Spyhunter when it failed to upload.
    I checked adware alert and spyware doctor and then restarted the computer.
    The two programs ran their boot sequence and I noticed the cursor was gone. I can not tell which program got rid of antivirgeat but one of them did. This is not a quick fix but it is a solution that worked.

    Michael

    Nov 11th, 2007 at 11:59 am   

63. 63

    Michael Says

    This is an accurate post except for misspelling antivirgear as antivirgeat

    Nov 11th, 2007 at 12:01 pm   

64. 64

    Solid Says

    i still got the logo blincking and poping up windows how do i get rid of it?

    Nov 12th, 2007 at 3:26 pm   

65. 65

    ivan Says

    It sounds rahter stupid! I find nothing in registry editor!
    When I begin to search, I find nothing,too!
    I have heard that this AntiVirGear is an abnormal virus which comes from your America!
    But how could we foreigners deal with it??
    Most of us can not understand your language!

    Nov 12th, 2007 at 9:11 pm   

Download SpyHunter* Spyware Detection Utility.

Leave a Response