IE AntiVirus Descriptions:
IEAV, or ieav.exe (ieantiavdownload.com),, is associated with a rogue anti-spyware application called IE Antivirus, which is a clone of Malware Bell, IE Defender or Files Secure.
Manual Removal Instructions:
Stop IEAntiVirus Processes:
(Learn how to do this)
ieav.exe
ieavinstaller.exe
Find and Delete these IEAntiVirus Files:
(Learn how to do this)
ieav.exe
ieavinstaller.exe
%desktopdirectory%\ie antivirus 3.2.lnk
%program_files%\ieantivirus\ieas.db2
%program_files%\ieantivirus\uninst.exe
%program_files%\ieantivirus\ieav.exe
%program_files%\ieantivirus\ieas.db3
%program_files%\ieantivirus\ieav.exe
%program_files%\ieantivirus\uninst.exe
%programs%\ie antivirus 3.2.lnk
Remove IEAntiVirus Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\software\ieantivirus
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run antispy
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run antispy
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ie antivirus
hi there, that method is correct. C:\WINDOWS\SYSTEM32\ – arrange icons by modified then delete the DLL file. It could be any name (IMPORTANT), in my pc its (ant_sr.dll) if you delete the file!! that’s it! now you get rid of that stupid prob!
Josh, you really help for me.
My file was wdol_bho.dll and it is about 26kb.
Hey you people first i want to thank you voor your help and mabey i can help you now becouse i notist something with the name of the .dll this may help you to vind out the name
: avg_sr.dll, antsafe.dll, ant_ss.dll, avirasafe.dll, AVIRAS~1.DLL, , other semi-random filenames made up from the following fragments: avg, ant, avira, safe, _sr, _ss
as you notis the names are those of anti virus software they do this so you software will not find it.
and the dll is always 26kb.
thanks again and i hope this will help you
WHAT HAPPENS if you HAVE downloaded the file. How, i seriously need help please. Thxs.
yes!! i did it
thnx josh. this was the second time i got this…
last time i believed in that stupid notice and eventually i had to reset my comp…
btw my comp language is not eng so i had troubles solving it.
what i did was remember back the approx date and time i got the first notice,
and look what file is the closest to it.. and just to remind u guys, the file is always 26kb
and theres 2 of them (for me) one of them had “safe” in the name
thanks alot.
Good post by Josh…
It was work to me…i was thinking to recovery my sys edi…
U safe me…
thanks
Mine was called Epson32.dll and was 26k too. Deleted it in safe mode as administrator, job done. You guys are the NUTS!!
Thanks a lot
Mine were named nvgflt.dll, nvfilter.dll, and nvgfilter.dll, as well as nvapps.xml. The .dll files were all 20kb in size. the maker is getting smarter – varying the file size now.
Thanks JOSH x 4 …
i found four dll files in d:\WINDOWS\system32
1.navf.dll 2.navfilter.dll 3.navflt.dll 4.nvfilter.dll
all same date with same 19.0kb size
i deleted these files in safe mode, now no more popup’s.
Josh,
You are the best. Your instruction is spotted on.
Thanks
JetDollars
Thanks SMF. Your solution was the FIRST posted in this or any other site that actually works for everyone with regard to the dll file. Your mention of unlocker was also greatly appreciated. Many heartfelt thanks from a fellow traveller.
josh i tried out your method but im unable to find any files which show type as module infact if i take my mouse pointer over it most of the .dll files are only showing
date created and size please help me if u read this post ……… or if anyone else knows any alternate method please help me i have already formatted my computer thrice becoz of this problem and i dont want to do it again so plz help me someone………plz
Most of you were right about this dumb pop up. Critical error! Attention some dangerous viruses detected in your system. Microsoft windows XP files corrupted.
It only pop up when I opened a certain folder or ran windows update. Here is what worked for me since I didn’t install the software they website wanted you to install.
1)Go to C:\WINDOWS\system32 folder. go up to view by details.
2) Then click on date modified. I started having problems on July 20th. So I found the .dll called: “iexflt.dll”
3) write down the .dll file from the day and time you were having problems.
4) Reboot in safe mode. go delete the file and empty trash.
5) Reboot and you are good to go. Enjoy!
Now why doesn’t my Symantec software pick this up??
Thanks! I did it.
Situation: I did not install that file, but it continue poping out the reminders.
Method:
1. Find the .dll under c:\windows\system32 which was installed recently. I got 2 .dll files.
2. Shutdown the computer.
3. restart computer, keep tapping F8 and go to Safe model
4. Delete those two files.
5. Reboot the computer.
Good Luck to all!
Easy: dombho.dll,
Size is 20KB
Thanks, I was becaming mad with this trojan.
Did what SMF said on Jun 17th, 2008 at 10:25 pm. Was called domie.dll. Thanks SMF!
8/7/08
gldman.dll
I have vista. I did the same thing Josh said. However, I couldn’t find Type:Module. Anyway, I found two .dll s with around 27 Kbs, modified on the date of infection. I tried to delete them but it was not possible from within safe mode. The computer did not answer and was stuck. I wrote down their names and deleted them in safe mode command prompt. Now, although I have not to go through a reformatting, but I feel my system is rather slow. I thank Josh a lot.
just reboot your pc in safe mode then go to c drive.
Now go to windows system 32 and search the items installed of that date when ieav started conflicting.
Do this to other folders too.
Then delete the suspicious files.
One more thing u should do, delete a file which is present in the c drive which is a long autorun type command.this will not be of the date when ieav installed.Most probably this will be of the date of your windows installation.do it carefully and keep only one thing in mind that u do not delete the ‘boot’ file.actually by this file only they give u those annoying warnings and ask u to download ieav.
note: if u have by mistake downloaded and installed the ieav antivirus (as it says itself) then uninstalling it from control panel or other simple ways will not do the job.
FOR this u need to right click the shortcut icon(usually on the desktop & not the downloaded file then) of ieav then click file location. after u will find uninstall ieav.
uninstall it from there.
YOU MAY NEED TO RECONFIGURE YOUR ANTIVIRUS AND FIREWALL APPLICATIONS AND UNINSTALL DOWNLOAD MANAGERS(IF U HAVE ONE)BECAUSE SOME VIRUS ARE ASSICIATED THERE TOO.
If u do not do this u might be again asked to download files every time u use internet explorer.
Thanks
can someone answer me?
tnx smf!
tnx smf! (mine was megupload.dll , megupl.dll and megupl~1.dll)
I had a problem, something pop up message is coming to the screen and download this, what i should to do?
I’ve forget to say that it says that i have trojan horse then i should download this program?