Remove AntiVirus Plus 2014 (uninstall instructions)

Start spreading the news!

AntiVirus Plus 2014 is a rogue anti-spyware program. This is a fake antivirus having in mind to persuade users to buy its full version, without actually rendering decent security services. It is not able to protect your PC from malware, being a computer infection by its nature. The behavior of this malicious program is the same as with other rogue anti-malware tools. It comes to computers without user’s permission. This guide explains how to uninstall AntiVirus Plus 2014 from your computer.

AntiVirus Plus 2014 rogue
AntiVirus Plus 2014 malware

AntiVirus Plus 2014 fake anti-virus program gets inside of vulnerable computers through direct participation of Trojan horses which find the leaks in the security settings of your PC. It is also spread together with other forms of malware, such as Zero access rootkits as an example. After successful infiltration attempt the rogue amends system settings of your PC in order to be self-started together with Windows.

Being successfully launched with every system startup, AntiVirus Plus 2014 imitates scanning of your system and reports the large number of fake and invented computer threats. Plus, the scanning process is accompanied by a lot of fake security alerts, warnings and notifications, such as:

Security Warning
Malicious program has been detected. Click here to protect your computer.

Firewall Warning
Hidden file transfer to remote host has been detected
AntiVirus Plus 2014 has detected a leak of your files through the Internet. We strongly recommend that you block the attack immediately.

Chrome.exe can not start
File Chrome.exe is infected by W32/Blaster.worm. Please activate AntiVirus Plus 2014 to protect your computer.

These fake security messages have in mind to make users panic after being scared with a lot of deceitful information about the status of his/her computer. The final plot of this fake antispyware is to convince you to buy its powerless full version, which in reality is not able to clean your system from real computer viruses. Even if you mistakenly purchase the so-called registered version of AntiVirus Plus 2014 it will again imitate cleanup of your PC by removing those invented infections. Yet, if your system is seriously attacked by real malware AntiVirus Plus 2014 will not remove them, being absolutely useless and helpless computer security application.

Download Combo Cleaner

Hopefully, you’ve understood by now that making the purchase of AntiVirus Plus 2014 is a serious error. This has been the primary mission of this article – to let you know about the danger of buying this fake anti-malware program. Another mission of this guide is to help you remove this virus from your system.

Removal of AntiVirus Plus 2014 isn’t an easy thing for users who don’t know certain peculiarities of dealing with rogue security programs. This scam blocks launching of many legitimate anti-viruses and common Windows tools and utilities, such as cmd.exe, taskkill.exe, Task Manager, etc. The same thing happens if you try to open your browser or several of them. All such decent files and applications are reported by this fake antivirus as infected with a computer infection called W32/Blaster.worm.

To get rid of AntiVirus Plus 2014 we recommend you to follow these instructions below in all details. Basically, to bypass the blockages on the part of this malware you need to first terminate or kill its malicious process, which may be different with time by its name. This guide explains how to stop AntiVirus Plus 2014 process by its window title with the help of a free utility developed by GridinSoft LLC, and how to finally completely remove this fake antispyware with the help of a full licensed version of GridinSoft Trojan Killer.

AntiVirus Plus 2014 removal instructions:

  • Open “My Computer“, or use “Win + E” hotkey command to open Windows Explorer.
  • In the address line type this text – http://gridinsoft.com/downloads/explorer.exe , then press Enter on your keyboard.
  • How to download explorer.exe utility by GridinSoft LLC

  • Download explorer.exe file and save it to your Desktop.
  • Note! The link above is for download of explorer.exe free utility developed by GridinSoft LLC to help users terminate rogue security programs by their window title. If for some reasons you can’t download this explorer.exe file through your infected computer, then you may download it from a clean computer and then simply copy it into your infected PC through USB Flash Drive (a.k.a. Jump Drive, Pen Drive or Memory Stick).

  • Run explorer.exe from the Desktop.
  • In the empty field of the utility that appeared type “AntiVirus” (without quotation marks, with respective capital letters as shown at the screenshot):
  • AntiVirus

  • Click “Scan“.
  • In the window that appears afterwards click “Yes” to kill threat process of the rogue named AntiVirus Plus 2014:
  • Kill threat process

  • The process of AntiVirus Plus 2014 has been successfully terminated, whereas the rogue isn’t yet removed!
  • Download GridinSoft Trojan Killer, install the program and run computer scan with it to remove all infections associated with this scam.
  • Click “Apply” at the end of scan.
Download GridinSoft Trojan Killer

Removal video at YouTube:

Associated file and registry information:

Related files:

%CommonAppData%\[random].exe
%CommonDesktop%\AntiVirus Plus 2014.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\AntiVirus Plus 2014 %CommonAppData%\[random]exe

%Desktop% implies that the file is located straight on your PC’s desktop. The full and detailed location is C:\DOCUMENTS AND SETTINGS\Current User\Desktop\ for Windows 2000/XP, and C:\Users\Current User\Desktop\ for Windows Vista and Windows 7 & 8.
%Temp% stands for the Windows Temp folder. By default, it has the location C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\Current User\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\Current User\AppData\Local\Temp for Windows Vista and Windows 7 & 8.
%AppData% means the current users Application Data folder. By default, it has the location C:\Documents and Settings\Current User\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 & 8 it is C:\Users\Current User\AppData\Roaming.
%StartMenu% stands for the Windows Start Menu. For Windows 95/98/ME the location is C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it stands for C:\Documents and Settings\Current User\Start Menu\, and for Windows Vista/7 & 8 it is C:\Users\Current User\AppData\Roaming\Microsoft\Windows\Start Menu.
%CommonAppData% means the Application Data folder in the All Users profile. For Windows XP, Vista, NT, 2000 and 2003 it has the location C:\Documents and Settings\All Users\Application Data\, and for Windows Vista/7 & 8 it is C:\ProgramData.

Malicious processes which were traced to be related to AntiVirus Plus 2014:

  • avplus.exe
  • antirplus.exe