AVG

AVG

 

When AVG Anti-Virus 2011 is installed it will be configured to start automatically when Windows starts. Once started it will perform a scan on your computer and when finished state that it is infected with a variety of malware. If you attempt to use the program to remove any of the malware it finds, though, it will state that you first need to purchase the program before it will remove anything. This is a complete scam as the scan results are all fake and many of the listed files are actually legitimate files that if removed could cause problems for your computer. Therefore, do not manually remove any of the items it displays in its scan results.
While AVG Anti-Virus 2011 is running it will also display alerts and warnings that attempt to scare you into thinking your computer has a serious computer security problem. These alerts will state that personal information is being stolen, active malware has been found, or that you are using unlicensed software. The text of some of these alerts are:

Warning!
Once installed on your machine, NetPumper may start monitoring your web browsing habits, such as what pages you usually load and what search terms you usually type in the search page. NetPumper may also deliver excessive pop-up advertisements even when you are not browsing the Internet. NetPumper also an ability to slow down your computer performance by using your hard drive recourses in order to deliver advertisements on your computer screen.
Warning! Identity theft attempt detected!
Attacker IP: <random IP address>
Attack Target: Microsoft Corp. Keys
Description: Remote host tries to get access to your personal information.

AVG Antivirus 2011 will also attempt to protect itself by not allowing you to run various programs that may assist in removing it. When you attempt to run these types of programs, AVG Anti-Virus 2011 will terminate it and then state that the file is infected. The text of the infection alert is:

Warning! Active Virus Detected!
Threat Detected: Email-Worm.Zhelatin
Infected file: <name>
Action taken: Applicrandom file ation Blocked
Description: Worm Email-Worm.elZhatin.vy is virus-like malware with destructive code, and is able to mutate, replacing its own code bdelete. Like most viruses, worm Email-Worm-Zhelatin.vy may spread to othery itself. Tmhis makes Email-Worm.Zhelatin.vy very dangerous, hard to find, and difficult to coputers by secretly emailing themselves to Internet users in your address book.

Just like the fake scan results, all of the above security alerts are fake and only being shown to scare you into purchasing the program.
Last, but not least, AVG Antivirus 2011 will hijack Internet Explorer, FireFox, Chrome, or Safari so that a different program is launched the displays a security alert. The text of the alert is:

About Internet Explorer Emergency Mode
Your PC is infected with malicious software and browse couldn't be launched
You may use Internet Explorer in Emergency mode - internal service browser of Microsoft Windows system with limited usability.
Notice: Some sites refuse connection with Internet Explorer in Emergency Mode. In such case system warning page will be showed to you.

Just like the fake infection warnings, alerts, and scan results, these browser messages are all fake and your normal browsers will be restored when you follow the steps in the guide below.
Without a doubt, AVG Antivirus 2011 was created for one reason; to scare you into thinking your computer has a security problem so that you will then purchase the program. It goes without saying that you should not purchase this program, and if you already have, please contact your credit card company to dispute the charge because the program is a scam and a computer infection. Finally, to remove AVG Anti-Virus 2011 and any related malware, please you use the removal guide below.

Threat Classification:

• Information on Rogue Programs & Scareware