Obtaining System Care Antivirus license won’t help to clean your PC from viruses
System Care Antivirus is a rough security software[1] that delivers fake alerts and system scans in order to promote paid version of the program. However, buying the license only leads to the waste of money, because this tool cannot fix your computer and remove viruses.
System Care Antivirus can also be found as System Care Antivirus 3.7.33. It might infiltrate the computer silently. The program has already caused lots of inconveniences for computer users in Australia, Canada, and France.[2]
Once SystemCareAntivirus gets inside the system, this virus tries to make itself perfectly comfortable there and modifies some of its parameters. As a result, it gets the ability to start every time you reboot your computer and begins scanning the system and displaying its fake alerts, such as:
System Care Antivirus Warning
Your PC is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.Click here to activate protection.
Warning!
Application cannot be executed. The file GoogleUpdate.exe is infected.Please activate your antivirus software.
Warning!
The site you are trying visit may harm your computer!
Your security setting level puts your computer at risk!
Activate System Care Antivirus, and enable safe web surfing (recommended).Ignore warnings and visit that site in the current state (not recommended).
This virus is just another version of AVASoft Professional Antivirus, Disk Antivirus Professional and many other viruses that have been spread by hackers previously. They all share the same GUI and also rely on the same marketing strategy, which is based on fake alerts and scanners. You can safely ignore these notifications, and you should remove System Care Antivirus without any delay.
For System Care Antivirus removal we recommend scanning the system with FortectIntego. It’s a real and professional security software that can protect you PC from cyber threats and clean all potentially dangerous entries.
Distribution methods of the fake antivirus software
The program spreads with the help of ZeroAccess rootkit[3] and Black Hole Exploit Kit.[4] Therefore, it might enter the system without your knowledge. However, you can avoid this from happening by protecting your PC with professional security tool and keeping all your programs updated.
You can get infected with it if you tend to visit illegal websites, download freeware, open spam or fall for fake alerts that typically ask to update your outdated Flash Player in order to watch something online. As soon as you click on such warning, you download Trojan horse,[5] which additionally downloads malicious files that belong to System Care Antivirus virus.
Instructions how to uninstall System Care Antivirus
If you want to remove System Care Antivirus, we recommend using FortectIntego, SpyHunterCombo Cleaner or other reputable security application. Don't forget to update it as soon as you download this security application so that it could find these infected files automatically.
However, If you can't run automatic System Care Antivirus removal, use these essential steps:
- Download FortectIntego. It is designed to run even when it is blocked, just change the name of its executable from xxxx.exe to xxxx.com.
- Try registering malware by using this code, which has been working with earlier parasites from this dangerous group of viruses: AA39754E-715219CE. It will make your malware think that you have purchased it.
Did this guide help?
13 comments
Fastgeek
Hey there,
We had a win7 pc infected with this thing. It came through some website currently unknown. I started the PC in safe mode (F8 during boot). Then I found the folder it started from by checking properties on the shortcuts it had placed on the desktop and in startmenu. In dos I deleted the folder. "rd xxxx /s". In regedit I removed two keys. One was found using search in regedit. The other listed above in your instructions. Thank you for your help.
skobola
The makers of this virus/malware should be prosecuted. However, probably they will not be. Why?
Caroline
Thanks so much for the info. The 2nd step worked by entering the security code. After that the task manager worked and I was able to delete it!
Zef
Used the activation code and then was able to open task manager, end the process and permanently delete the file. Thanks so much!
Pissed
You should mention that Spy Hunter costs money. A$$hole. I did a full scan only to asked to be paid at the end.
REALLY PISSED
Capitalism at its best!!!!! 30min scan by Spyhunter and they want $$$$$$$$! Thanks for wasting my time! I will never buy anything advertised on this site!
tj
Thank you
Step 2 worked.
George
Indeed SpyHunter costs money. There are methods you can find online to do it for free, however SpyHunter does have the advantage of doing it with only one reboot. This can be advantageous if you are directing someone to remove it and you dont have the luxury of being with them to reboot into safe mode, edit registry keys, reboot regular, etc.
As for the writers of the system care antivirus worm, it is highly unlikely they would ever face any kind of criminal charges. Most likely they are not from the US which is one of very few countries with any kind of criminal law against such activity.
Grover Syck
The easiest way to get rid of System Care Antivirus is to run System Restore to a time before you got the virus.
It worked perfectly for me.
Vivian
This virus would not let me do anything! i tried renaming the files but it would only reproduce itself. Then following anothers advice i went to the source file. it was there that i renamed the two files and whoa la it worked.
richard
Your first mistake is using any windows products.
get a Mac and you will never have these problems
Dan
I used the step 2 method worked great, thank you!
robert
I just got it opening a delivery notification. How i got rif of it was going to task manager and stopping the process...going to the file location and deleting the Systemcare exe...emptying the recycle bin. I am back up and running so far with no interference.