Green AV
What is Green AV
Green AV is a rogue software. A rogue software application designed to trick users into buying a fake product by using scare tactics. It will bombard you with pop ups in order to try and scam you out of money. This infection can come into after fake video codec installation/adult sites that usually comes with malware.
Aliases : Green AntiVirus
Infection Type : Rogue Software
Risk Level : Dangerous
System Affected : Windows Operating Systems
Download Removal Utility for Green AV
General Symptoms
- Displays fake warning messages and “Safety Center Alert ” popups alerts.
- Flashing icons appear on your system tray (Near of your system clock).
- Hijacked homepage to unknown webpage.
Image of Green AV
Manual Removal of Green AV
Still Have Problem? Post the HijackThis log in the forums [ Click Here ]. Our expert team will evaluate and identify your problem and respond you shortly.
wsav.exe, wtds05.exe, rwg.exe
Get rid of Files and Folder ( Help )
C:\Documents and Settings\All Users\Application Data\gwr\
C:\Documents and Settings\All Users\Application Data\gwr\mwrdll.exe
C:\Documents and Settings\All Users\Application Data\gwr\rwg.exe
C:\Documents and Settings\All Users\Application Data\gwr\Viruses.dat
C:\Documents and Settings\All Users\Application Data\gwr\wsav.exe
C:\Documents and Settings\All Users\Application Data\gwr\WStech.dll
C:\Documents and Settings\All Users\Application Data\gwr\wtds05.exe
C:\Documents and Settings\All Users\Desktop\ Green AV .lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Green AV
C:\Documents and Settings\All Users\Start Menu\Programs\Green AV\Green AV .lnk
Delete following folders ( Help )
gwr,
Green AV
Delete Registry Values ( Help )
HKEY_CURRENT_USER\Software\GAV
HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
HKEY_CLASSES_ROOT\AppID\WStech.DLL
HKEY_CLASSES_ROOT\CLSID\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_CLASSES_ROOT\Interface\{051C9A06-FB08-486F-B09B-8B33B261637D}
HKEY_CLASSES_ROOT\TypeLib\{512E801E-2F02-4ADE-ACAA-58F08A22B2F8}
HKEY_CLASSES_ROOT\WStech.WStechB
HKEY_CLASSES_ROOT\WStech.WStechB.1
HKEY_LOCAL_MACHINE\SOFTWARE\GAV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\LanmanServer\Shares\0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB} “NoExplorer”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “03874569874596″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “37465982736455″
Download Removal Utility for Green AV
Related Files
Other Removal Source, Check Below Links 
