Super AV

Super AV removal guide

Super AV is a rogue computer security program. It's a copy of it's previous version called Antivirii 2011. As it's predecessor Super AV is a non professionally created bogus program that is created using a Napalm Rogue Builder. Internet criminals are using this builder to change the names and payment gateways. When your computer is infected with Super AV you will notice various warning messages which states that your PC is in danger and that you need to purchase Super AV in order to remove the detected security issues.

If you click on a Register button in the main window of Super AV you will asked to purchase this program to remove the detected spyware/malware. Needles to say that this program doesn't actually scan your computer for security issues, Super AV is a scam that tries to scare you into thinking that your PC is infected and then selling you a fake licence. You shoudn't buy this program, if you do your banking information will be at risk and your computer will still be infected. If you have already purchased a licence for Super AV contact your credit card company and dispute the charges stating that you have been tricked into purchasing a fake computer security scanner. Remove Super AV from your computer its a scam.

Main window of Super AV:

Super AV will display such fake security warning pop-ups:

"Your system is infected! Your computer is compromised by hackers, adware, malware and worms! Super AV can remove this infection. Please click this icon to remove threats"

Ignore these messages. Remove this fake antivirus from your computer.

Super AV removal

1. Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

2. Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

3.  Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):

O4 - HKLM\..\Run: [Security] C:\Windows\<random>.exe

After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.

4. Download and install antispyware software to completely remove the infection.

Super AV remover

Other tools known to remove Super AV:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.

If you are unable to remove Super AV, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Super AV processes:

superav.exe
random.exe

Remove these Super AV entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Security"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe "Debugger"

Delete these Super AV files:

C:\Windows\superav.exe
C:\Windows\<random>.exe

General tips on removing Super AV:

*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.