How to remove Home Antivirus 2010 (Uninstall instructions)

Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here!

How to remove Home Antivirus 2010 (Uninstall instructions)

Home Antivirus 2010 is a fake antivirus/antispyware program that designed to trick you into buying the fake software by using scare tactics: fake privacy alerts and false positives. When installed, the rogue is set to start automatically when your computer starts and creates a few files. These files during the scan will determine as infections. Once running, Home Antivirus 2010 starts scanning the computer and found a lot of trojans and spyware that cannot be removed unless you first purchase the software. All of these infections are fake, so you can safely ignore them.

Home Antivirus 2010 (more screen shoots 1, 2, 3, 4)

While Home Antivirus 2010 is running your computer will display nag screens and fake security alerts from your windows taskbar. An example:

Privacy alert!
Your system was found to be infected with intercepting
programs. These can log your activity and damage your
privacy. Click here for Home Antivirus 2010 spyware removal.

Also the program will show fake Windows Security Center that will recommend you register Home Antivirus 2010. Instead of doing so, use these Home Antivirus 2010 removal instructions below in order to remove this infection and any associated malware from your computer for free.

Symptoms in a HijackThis Log

O4 – HKLM\..\Run: [Home Antivirus 2010] “C:\Program Files\HomeAntivirus2010\HomeAntivirus2010.exe” /hide

Use the following instructions to remove Home Antivirus 2010 (Uninstall instructions)

Download Avenger from here and unzip to your desktop.

Run Avenger, make sure that “Scan for rootkits” and “Automatically disable any rootkits found” both are checked. Copy,then paste the following text in Input script Box:

Registry values to delete: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Home Antivirus 2010

Folders to delete: %ProgramFiles%\HomeAntivirus2010

You will see window similar to the one below.

Avenger

Click on ‘Execute’. You will be asked Are you sure you want to execute the current script?. Click Yes.

You will now be asked First step completed — The Avenger has been successfully set up to run on next boot. Reboot now?. Click Yes.

Your PC will now be rebooted.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Home Antivirus 2010 infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start Home Antivirus 2010 removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Update: a new version of Home Antivirus 2010 has been released. It is called PC Antispyware 2010. Read the article: How to remove PC Antispyware 2010.

Home Antivirus 2010 creates the following files and folders

C:\Program Files\HomeAntivirus2010
C:\Program Files\HomeAntivirus2010\HomeAntivirus2010.exe
C:\Program Files\HomeAntivirus2010\htmlayout.dll
C:\WINDOWS\system32\cepapyx.com
C:\WINDOWS\syromeni.bat
C:\Program Files\Common Files\ywukynota.com
C:\Program Files\Common Files\vivifabyx.dll
C:\Documents and Settings\All Users\Application Data\ciqudehyri.dll
C:\WINDOWS\system32\_scui.cpl

Home Antivirus 2010 creates the following registry keys and values

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Home Antivirus 2010
HKEY_CURRENT_USER\Control Panel\don’t load\scui.cpl
HKEY_CURRENT_USER\Control Panel\don’t load\wscui.cpl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel

Share and Enjoy:

July 19, 2009 on 11:17 am | In Rogue Anti Spyware, Tutorials - HowTo | 44 Comments |

44 Comments »

RSS feed for comments on this post. TrackBack URI

These instructions worked great to remove the spyware! Simple and straight-forward.

Thanks, you’re a life saver.

Mike

Comment by Michael Powell — July 20, 2009 #
This helped remove the virus from my comp. Thanks so much!

Comment by maria — July 21, 2009 #
I have downloaded mbam, however, I am unable to open it. I have installed it twice but am unable to run it. Why?

Comment by Kyle — July 23, 2009 #
thank you so much.

Comment by max — July 23, 2009 #
Kyle, looks like your computer also infected with trpjan that blocks MBAM. Ask for help at our forum.

Comment by Patrik — July 24, 2009 #
These instructions were very easy to follow, and helped to not only clean my computer of the Home Anti-Virus crap, but also of several other trojans/malware I wasn’t even aware of. Thanks a bunch!

Comment by Mike — July 24, 2009 #
We had Home AntiVirus 2010 downloaded on our PC. We ran the Avenger and downloaded the MBAM. However, after 2 seconds of running the Scan, it automatically removed from the screen without anything….have renamed and to no benefit….What’s going on…really frustrated at this point…Please help.

Also, we cannot access internet as you can imagine and now even while double clicking

Comment by Anshul Aggarwal — July 24, 2009 #
Anshul, follow these instructions.

Comment by Patrik — July 24, 2009 #
Thanks a lot. This worked perfect.

Comment by Jenny — July 25, 2009 #
Thanks a lot, this Home Antivirus 2010 was driving me crazy, thanks to you guys i removed it from my computer, your help was great.

Comment by Rodner Yamil Pineda — July 26, 2009 #
I am trying to remove, Home AntiVirus 2010 by following your instructions but it wont allow me. When I click on the Malaware icon it is not letting me open it. It opened automatically when I downloaded it. I pressed scan and it just disappeared..Im so annoyed. My pc is infected with no hope of fixing it. can you help?

Comment by cherry cuff — July 28, 2009 #
I dons’t work for me… I tried to lunch the avenger.exe but it said that it could not find any thing…?
WHAT DO I DO?

Comment by Nicolaj — July 28, 2009 #
Cherry and Nicolaj, ask for help at our Spyware removal forum.

Comment by Patrik — July 29, 2009 #
아! 진짜 고맙습니다!

구글과 메신저를 제외한 다른 웹사이트들에 접속이 안됐는데
덕분에 컴퓨터를 치료했어요♡

Comment by YooDing — July 31, 2009 #
IT removed this Home Antivirus 2010 virus that crippled our computer. The instructions from your site was easy to use and successful in wiping out this virus. Thanks a million!

Comment by Carl & Kim — July 31, 2009 #
great job, worked like a charm.. i was wondering can i use this method to remove other infection by editing the name of the program

Comment by kester — August 2, 2009 #
If you can not get on the internet to download avenger – how can I remove home anti-virus 2010 from my computer?? Can not get web access at all!! What do I do?

Comment by heidi — August 5, 2009 #
worked great! thx sooo much!!!!

Comment by Dan — August 5, 2009 #
Having same problem as Anshul and cherry cuff, above, but now with a new twist. Followed your instructions in the comment posted in reply to Anshul, and the malware is doing the same thing to the HijackThis program. It runs about two seconds, then is automatically shuts down. When I re-run it, I get an error message box saying I don’t have appropriate permissions to access that item. Any suggestions? Thank you!

Comment by SSmith — August 7, 2009 #
heidi, try to download the necessary stuffs using Safe mode with networking.

Comment by Patrik — August 12, 2009 #
SSmith, looks like malware blocks HijackThis. Try to boot your PC in the Safe mode and repeat above steps.

Comment by Patrik — August 12, 2009 #
I removed the home antivirus 2010 by MBAM but it keeps appearing after 1-2 days. I removed it again but still after 1 day it reappears. please help!!

Comment by rajeev — August 14, 2009 #
rajeev, looks like your computer infected with trojan that installs the rogue again. Ask for help at our spyware removal forum.

Comment by Patrik — August 14, 2009 #
When I run avenger and reboot my computer the log says that antivirus 2010 is not found. Also when I MBAM is finished it says I cannot remove antivirus 2010. What do I do!?

Comment by Frank — August 14, 2009 #
Frank, probably your PC infected wit a new variant of the rogue, ask for help at our spyware removal forum.

Comment by Patrik — August 15, 2009 #
Can ANY ONE help me? This is good, but not for me. I have this virus, and it wouldnt allow me to download ANY programs. So my only way now is to do it manuly. Please help, I cant find any of the files and dont no which to delte.

Comment by Ryan — August 20, 2009 #
O man, I REALY needa get this thing off. Some one PLEASE help.

Comment by Ryan — August 20, 2009 #
Ryan, try to download programs in the Safe mode with networking.

Comment by Patrik — August 23, 2009 #
OMG!! This worked!!! Thank God for you people!!

Comment by Marie-Ali — September 1, 2009 #
It works!! Salute to the big trout!

Comment by Pheniox — September 5, 2009 #
I have the antivirus 2010 in my laptop and cant seem to get rid of it without paying for anything!! isnt there a way of doing it without purchasing an anyspyware??

Comment by Ana Melisa — October 3, 2009 #
Ana, if instructions above does not help you, then ask for help in our Spywar removal forum.

Comment by Patrik — October 3, 2009 #
Dose this thing really work? I would not like to have another virus on my computer.

Comment by dude — October 4, 2009 #
It really works. Read comments above.

Comment by Patrik — October 5, 2009 #
removal anti virus 2010 succefull:

1- remove Antispyware 2010.exe(or equivelent) proces in taskmanager
2- run spyhunter security suite(first update definitions)
3- run Norman security suite(after this norman asks reboot due to non removable files)
4- reboot with downloadable AVIRA rescue cd(this is a virus scan before windows startup); then run scan, make sure check the box in configuration delete file
5- Then normal reboot; virus gone also red circle with white cross

All used programms can be downloaded.

Comment by Marcel — October 8, 2009 #
Great help sorting out my daughters Pc – BIG THANKS.

Those who can’t run malwarebytes once downloaded might want to try and run it as administrator.

Cheers

Comment by David Moffitt — February 1, 2010 #
Hi

Like others I was unable to run mbam (fresh download) after installing it.

To run it I had to use the Admin acc in safemode. It found some stuff and required a reboot.

On reboot pc still infected.

Installed Avast and told it to do a boot time scan. But it complained about some missing start point???

In the normal user acc I ran the sysinternals process explorer and found that av.exe was running multiple instances. Bizarely some of these instances seemed to be children of bonefide programs??? Killing av.exe just opened more instances

I traced av.exe to docs’n’settings/user/localdata/appdata and deleted it.

Not a good move!!! Now I was unable to run anything as clicking on any icons opened the “what program should windows open this with?”.

I got pissed off and reformatted…

Comment by daryl — February 7, 2010 #
Follow directions exactly and it worked, as of this evening. Thanks alot dude

Comment by B Red — February 21, 2010 #
cheers

Comment by ada — February 22, 2010 #
I just extracted this virus off a laptop running Vista Home Basic for a customer today and noticed after running mbam and hijack this, that when the av.exe process was ended through task manager, the pop ups went away. Then when anything was clicked to run, they started again. HijackThis told me that the av.exe was in C:\Users\%username%\AppData\Local\av.exe. After many failed attempts, I got mad, then backed up and deleted av.exe, as I figured I knew enough to recover from whatever. When I rebooted, .exe’s had lost their file association. This Antivirus 2010 modifies the registry key to have all .exe’s ran through av.exe. The only way to get the regedit up was to find it in the Windows folder, right click, and run as administrator.
The reg keys that I modified are:
These are the CORRECT values
HKEY_CLASSES_ROOT\.exe | “exefile”
HKEY_CLASSES_ROOT\exefile\shell\open\command | “%1″ %*
Once those are fixed, and av.exe is deleted, you should be able to get your system back fairly easy with mbam and HijackThis.

Comment by Chris Riney — March 10, 2010 #
Arrrgh!! Malwarebytes couldn´t find anything wrong with the computor.. Going to download spydoctor now. Really, really hope it works!

Comment by Maline_ — March 11, 2010 #
…and the only way to this webpage is from ´search´..

Comment by Maline_ — March 11, 2010 #
are u kidding me?? Spydoctor is not free!

Comment by Maline_ — March 11, 2010 #
Maline, if you need a help, please open a new topic in our Spyware removal forum.

Comment by Patrik — March 12, 2010 #