AntiVirus Studio 2010 is a new rogue antivirus program from the same malware family as Desktop Security 2010, Total PC Defender, etc. Like other similar programs, the rogue was created with one purpose – to trick you into purchasing its full version by using scare tactics such false scan results and fake security alerts. Thus you need to remove AntiVirus Studio 2010 from your PC as quickly as possible!
AntiVirus Studio 2010 is usually installed onto a computer without permission and knowledge through the use of trojans. Once started,the rogue registers itself in the Windows system registry to run automatically every time, when PC starts. Immediately after launch, this malware will imitate a system scan and report a lot infections that can not be removed unless you pay for its paid version. However, this is a scam, because AntiVirus Studio 2010 is unable to detect or remove any infections. So, you may easily ignore the false scan results.
While AntiVirus Studio 2010 is running, you will be shown a lot of popups, nag screens and fake security alerts, that states that your computer is infected and offering to buy or activate the full version of the fake antivirus. Of course, like false scan results above, all of these alerts and warnings are just a fake. This is an attempt to make you think your computer is infected with all sorts of malicious software. Like false scan results you can safely ignore them.
As you can see, AntiVirus Studio 2010 is a scam. Most importantly, do not purchase it! Instead of doing so, follow the removal instructions below in order to remove AntiVirus Studio 2010 and any associated malware from your computer for free.
Symptoms in a HijackThis Log
O4 – HKCU\..\Run: [AntiVirus Studio 2010] “C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\AntiVirus Studio 2010.exe” /STARTUP
O4 – HKCU\..\Run: [SecurityCenter] C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\securitycenter.exe
O4 – HKCU\..\Run: [{RANDOM}.exe] C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\securityhelper.exe
Automatic removal instructions for AntiVirus Studio 2010
1. Reboot your computer in Safe mode with networking
Restart your computer.
After hearing your computer beep once during startup, start pressing the F8 key on your keyboard. On a computer that is configured for booting to multiple operating systems, you can press the F8 key when the Boot Menu appears.
Instead of Windows loading as normal, Windows Advanced Options menu appears similar to the one below.
Windows Advanced Options menu
When the Windows Advanced Options menu appears, select Safe mode with networking and then press ENTER.
Step 2. Remove AntiVirus Studio 2010 core components
Download HijackThis from here and save it to your Desktop. If you cannot run HijackThis, then re-download it, but before saving HijackThis.exe in the Save dialog, rename it first to explorer.exe and click Save button to save it to desktop.
Run HijackThis. Click “Do a system scan only” button. Now select the following entries by placing a tick in the left hand check box, if present:
O4 – HKCU\..\Run: [AntiVirus Studio 2010] “C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\AntiVirus Studio 2010.exe” /STARTUP
O4 – HKCU\..\Run: [SecurityCenter] C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\securitycenter.exe
O4 – HKCU\..\Run: [{RANDOM}.exe] C:\Documents and Settings\Username\Application Data\AntiVirus Studio 2010\securityhelper.exe
Make sure your Internet Explorer and any other browsers and programs are closed, then click Fix Checked. Close HijackThis.
Step 3. Remove AntiVirus Studio 2010 associated malware
Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.
Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.
MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.
As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.
Malwarebytes Anti-Malware Window>
Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer for AntiVirus Studio 2010 infection. This procedure can take some time, so please be patient.
When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove AntiVirus Studio 2010. MalwareBytes Anti-malware will now remove all of associated AntiVirus Studio 2010 files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
AntiVirus Studio 2010 removal notes
Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.
Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.
AntiVirus Studio 2010 creates the following files and folders
%AppData%\AntiVirus Studio 2010\AntiVirus Studio 2010.exe
%AppData%\AntiVirus Studio 2010\securitycenter.exe
%AppData%\AntiVirus Studio 2010\securityhelper.exe
%AppData%\AntiVirus Studio 2010\taskmgr.dll
%Temp%\winlogoff.exe
%Temp%\wrfwe_di.exe
C:\Documents and Settings\Username\Start Menu\Programs\AntiVirus Studio 2010\Activate AntiVirus Studio 2010.lnk
C:\Documents and Settings\Username\Start Menu\Programs\AntiVirus Studio 2010\AntiVirus Studio 2010.lnk
C:\Documents and Settings\Username\Start Menu\Programs\AntiVirus Studio 2010\Help AntiVirus Studio 2010.lnk
C:\Documents and Settings\Username\Start Menu\Programs\AntiVirus Studio 2010\How to Activate AntiVirus Studio 2010.lnk
C:\Documents and Settings\Username\Start Menu\Programs\AntiVirus Studio 2010.lnk
AntiVirus Studio 2010 creates the following registry keys and values
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirus Studio 2010
HKEY_CURRENT_USER\Software\AntiVirus Studio 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | pbavwturwm4e = “%AppData%\antivirus studio 2010\securityhelper.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | AntiVirus Studio 2010 = “”%AppData%\AntiVirus Studio 2010\AntiVirus Studio 2010.exe” /STARTUP”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | SecurityCenter = “%AppData%\AntiVirus Studio 2010\securitycenter.exe”
Problem solved!!! Thank you so much for your help! 🙂
My husband was getting those stupid Studio 2010 popups and fake scans. Arg! Followed the directions above. Was a little bit afraid that this was also something harmful…but felt we had nothing to lose. Just finished. Computer is back to normal! Thank you!
Thank you so much for this.Proplem solved in like a minute 😛
Thanks so much for this post. I have fixed my problem! Thanks… ^^
My son’s computer became infected with the AntiVirus 2010 software and after closely following your instructions, I had it back to normal in a much shorter time than I anticipated! Thanks so much.
thanks a ton! totally fixed!
The instructions are excellent. I am up and running , thanks very much!!!!!
Thank you very much! Your instructions absolutely solved the problem 🙂
THANKS that did it. I was worried I’d have to pay a techn. like my friend did. Youre great.
I followed the instructions. But the virus is still there and keep pooping up.
I have Microsoft Vista. Is there anything different steps for that ? Please help me.
Adata, probably your computer is infected with a new version of the rogue. Please start a new topic in our Spyware removal forum. I will help you to remove this malware.
Thank you very much..
It works 🙂
Bye bye Antivirus 2010..
tks a lot dude!! the instructions u gave help out a lot! tks for yr help=D appreciate tat!!!!!!!
Thank you guys so much. You are my computer’s savior. That rogue antivirus program was so annoying and I was able to delete all of it’s componenets thanks to the clear instructions on this site. 🙂 🙂 🙂 I’m so happy my comp is back to normal, thanks!!!!!
Thank you!! You are awesome!!! It worked! Yea!!
Wow! Thank you guys…. You save me from a ‘shout’ from my boss… As I have an urgent thing to do and my pc is almost crashed because of the studio 2010 virus. You saved me! Thank you thank you! :))
It worked for me. Pray it doesn’t come back.
Had 2010 Anti Virus Studio Trojan. Even if you deleted it’s file sit would come back on avery reboot. Ran HiJack This and it found only one registry entry. I knw there were more so ran Malwarebytes which found all of them and removed them. Rebooted and no more Torjan!! Yeah!!!!
Btw, I did all this in regular mode (not safe mode) because I didn’t want the virus to get active again (every reboot) and block my internet connection etc, so I took the risk, but all worked perfectly. However, I didn’t get Malwarebytes from the link in the above article …could not find the free/shareware version, so got it here: majorgeeks.com/download.php?det=5756
Everything else (except for where I got Malwarebytes and that I did all in normal-boot mode) worked exactly as shown in the article above.
Btw, if you can find all the files (in appdata/romaing and appdate/local and start-up etc as shown above and delete them in adavance, that makes it much easier since I didn’t have to fight the virus to do the downlowads and removal.
If the virus is still active, then I would suggest doing exactly as it says above (in safe mode) with the exception of getting malwarebytes from the link I posted.
Best of luck …you’ll be happy once it’s gone!!
-The Man