spyware removal instructions

AntivirusGold removal

Spyware AntivirusGold Information
Name: AntivirusGold
Category: Trojan
Date: 2005-06-01
Dangerous: Yes
AntivirusGold is an adware application. Antivirus Gold is installed by some trojans without asking for user permission. The desktop wallpaper is modified & advertisement is displayed using the user to buy Antivirus Gold. Upon clicking on the message, a web explorer is opened to point to www.AntiVirus-Gold.com. The purpose of this trojan is to install itself & pretend that only AntiVirus Gold can remove it.
>> Delete AntivirusGold automatically - Download Spyware Doctor

AntivirusGold Removal Instructions
Kill the following processes
antivirusgold.exe, ongi.exe, uninst.exe
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{020b1227-417d-4682-9ac3-61f43cb5b6b1}
HKEY_CLASSES_ROOT\clsid\{125494b2-acad-414c-98b9-452f3ef7703a}
HKEY_CLASSES_ROOT\clsid\{20a3d913-30ef-4e69-b3f7-93b3f1fb9d5c}
HKEY_CLASSES_ROOT\clsid\{3d00a39c-655b-428b-aeb2-2fba03dcc49c}
HKEY_CLASSES_ROOT\clsid\{408f660a-9465-44a3-b557-8709dfd992bc}
HKEY_CLASSES_ROOT\clsid\{5f6bbd8a-18cf-4d55-8b4c-c9b4c9328dfe}
HKEY_CLASSES_ROOT\clsid\{8c56b6ce-c53f-44c4-9bdc-a9bc1711d05a}
HKEY_CLASSES_ROOT\clsid\{8ee6bf73-b370-4d13-9126-eb0071178f2e}
HKEY_CLASSES_ROOT\clsid\{97f56e12-c706-4aeb-9ffb-133c05ee5d38}
HKEY_CLASSES_ROOT\clsid\{9bb7e700-4e48-476d-b75c-6f47606be988}
HKEY_CLASSES_ROOT\clsid\{cbcaca58-1aee-4600-8cf0-e8b30bff1535}
HKEY_CLASSES_ROOT\clsid\{d6d64cdf-0363-4261-b723-29a3af365e1d}
HKEY_LOCAL_MACHINE\software\antivirusgold
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirusgold.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirusgold
Remove the following files
aglanguage.ini, antivirusgold.exe, antivirusgold.lnk, ongi.exe, shortcut to antivirusgold.lnk, uninst.exe.
antivirusgold 2.0.lnk in Documents and Settings\UserName\administrator\start menu\
Remove the following directories
Documents and Settings\UserName\administrator\start menu\programs\antivirusgold
Program Files\antivirusgold

Bookmark AntivirusGold page

Visitor Comments on AntivirusGold
2005-07-05 08:10:45, Rob W.:
Ive been looking for this for ages
2005-07-19 16:43:04, Charles:
I followed instructions exactly as stated in this page yet, I am unsuccessfull in getting rid of Antivirus Gold. My PC is installed with XP-SP2.
Can anyone out there help me.
Thanks.
2005-07-21 19:09:08, amc:
I've gotten rid of one of the links, but the wallpaper is still there. Any thoughts?
2005-07-22 14:25:56, Jordan:
got this removed, but now IE6 won't work at all Any help out there?
2006-06-07 21:20:22, Kaulbach:
I'd say use FireFox, but for WinUpdate etc you still need the IE engine anyhow. You can reinstall IE by downloading it off Microsoft again. There is also a redist (redistributable version) that is useful to have (eg: does not need internet to install it).
2007-05-21 18:10:39, lalit:
change the entry in registry...u could get rid of wallpaper
 Previous Spyware: Remove Trojan.Win32.StarField  Next Spyware: Remove Trojan.Win32.Starter