Home / Spyware Help / IEAntivirus or IEAntivirus 3.2 Removal Guide

IEAntivirus or IEAntivirus 3.2 Removal Guide

by 25 Comments

Do you know what IEAntivirus is?

IEAntivirus, also referred to as IE Antivirus 3.2 or IEAntivirus, is a rogue anti-spyware program that pretends to be a legitimate spyware removal tool. IEAntivirus was discovered by us to be a variant of other previous rogue applications such as Malware Bell, Files Secure and IE Defender. IEAntivirus is potent in the way that it displays erroneous scan results listing several infections that it supposedly found on your system. The scan results that IEAntivirus lists are totally bogus and cannot be trusted.

IEAntivirus is no good at removing spyware or any other known parasites. IEAntivirus may be installed through the well known Vundo or Zlob Trojan infection. Usually these types of Trojans are downloaded through a fake video codec or peer to peer websites. IEAntivirus' ultimate goal is to get computer users to purchase the full version of IEAntivirus through it's devious antics. IEAntivirus has it's own website, IEAntivirus.com, which promotes and sells the IEAntivirus software. This website should be avoided because it is very devious in the way it advertises and promotes a potentially dangerous program.

In non-techie terms: IEAntivirus is just like other known rogue anti-spyware programs in that it attempts to take your money in return for a useless program. IEAntivirus is a complete waste of time and should not be downloaded or purchased under any circumstances.
IEAntivirus screen shot image:

IEAntivirus.com website:

Name: Ieantivirus.com
Ieantivirus.com WHOIS Information:
Website IP Address: 89.149.227.195
Registration Service Provided By: ESTDOMAINS INC
Contact: 1.3027224217
Registrar: www.estdomains.com
Domain Name: IEANTIVIRUS.COM
Update Date: 23-Apr-2008
Creation Date: 21-Apr-2008
Expiration Date: 21-Apr-2009
Domain servers in listed order:
ns1.ieantivirus.com 89.149.226.22
ns2.ieantivirus.com 89.149.227.195

Aliases: IE Antivirus, IE Antivirus 3.2, IEAntivirus, IEAntivirus.com

Tags: .
  • gab

    I did all of the above and i am still getting pop ups telling me to install IE Antivirus. How do i stop this?

  • jessie

    when my computer scans and finds lots of threats, how am i supposed to know if they are real or not? this time i knew, because i'd heard bout ie antivirus before.. and problem solved. but what about next time? how do i protect my computer?
    btw, thanks for the solution!
    jess

  • gerald smurphat

    i am realy stupid , i downloaded and payed for this thing before reserching it is there any way to get money back

  • Josh

    Thanks for your post.

  • laura

    gerald.. never ever do thattt... best stuff u can do is google it before u use the credit card.. !! u're gonna find free stuff like i did ( :-D ) to remove all ur boo boos... i knoooow ie antivirus sucks

  • Mya

    Gab:

    SmitFraudFix is a specific tool that is designed to remove specific infection, apparently the issue that you are having is because you have several additional infections that SmitFraudFix does not target. You may want to try other free programs to get rid of IE Antivirus.

    Jessie:

    If the product you're using is reliable then it is doing its job. If not, take one of the files that the scanner finds and search for it on google and see what other websites are saying or whether the file is associated with a spyware program.

  • gil

    hi,
    i think the ie got blown away or so (no pop up yet so far)
    thnx

  • http://harvestmoonwii.com Was in trouble

    Thanks so much for this I searched everywhere for how to remove the IE antivirus and I had to pay for some junk spywear. Your techniqe w/program knocked it off my computer. THANKS !!!! I'm so glad it doesnt pop up everytime now!

  • larrylchan

    On the 3rd of June I purchase the ieanti.virus 3.2 Before I have a chance to print out the purchase license the page disappear so now I cannot operate it please contact to tell what to do to correct it.

    Thank you

  • Gary

    I was also held hostage from IE AntiVirus over 17 hours
    I wasted so much time in trying to get it removed by Norton's. I finally removed Norton's and added Spyware Doctor with Antivirus. IE AntiVirus was quarantine and deleted. I felt that somehow that Spyware Doctor might not removed all of the programs that was duplicated and used by IE AntiVirus. I then read about SmithFraudFix.exe and I followed step by step on how to remove everything that IE AntiVirus might had left behind. SmithFraudFix.exe is really a life saver and a computer saver. I made a webpage and I am donating my time in trying to educate others that might not be as luck as I was in removing IE AntiVirus. I have also added links to this website and SmithFraudFix.exe.

  • Zodiak

    Thank's, thats all i can say...
    words cant describe how much i lub u xD
    <3

  • Susan

    The SmitFraudFix doesn't work - this virus has blecked me from downloading it, (as it has all other fixes). It also erased that portion of windows that lets me search for files and stuff so I can remove it manually. I am not a happy camper!

  • lz

    cant remove, keep pop up,plsss help

  • lz

    cant remove, keep pop up,plsss help,
    the virus popup during i click any folder of my computer

  • Mad

    I did all the things to remove the IE antivirus but when i open my drive it pop out and said "System Error!"bla bla bla then click ok to download antispyware.Can someone help me please !!?

  • Telly

    If you have Antivirus 2008, is it the same thing? Can you remove it the same way?

  • fernando

    I don't know what happened cause I didn't find the:

    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ie antivirus

    And the pop ups continue :

    "System Error
    Atention WinuE! ...

    Also the file ieantivirus.dll
    couldn't delete

    Thank you
    Bye

  • Gary

    Spybot has an update that completely fixed the problem. Hope you already have it on your machine so all you have to do is launch it and update it.

  • http://www.myspace.com/fluidliquid Leo

    This is a log of my scan using SmitFraudFix. I never instaled IE Anti Virus but I do get the pop up stating a critical error each time I try to open any kind of folder.

    SmitFraudFix v2.328

    Scan done at 23:19:46.57, Wed 07/02/2008
    Run from C:\Users\fLuiD\Desktop\SmitfraudFix
    OS: Microsoft Windows [Version 6.0.6001] - Windows_NT
    The filesystem type is NTFS
    Fix run in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
    c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\DRIVERS\xaudio.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\System32\jureg.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Windows\system32\schtasks.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Common Files\AOL\1209725682\ee\aolsoftware.exe
    C:\Windows\system\wcdvtray.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\AIM6\aim6.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\ehome\ehsched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\ehome\ehRecvr.exe
    C:\Program Files\AIM6\aolsoftware.exe
    c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Windows\system32\jusched.exe
    C:\Program Files\Winamp\winamp.exe
    C:\Program Files\AOL 9.0\waol.exe
    C:\Program Files\AOL 9.0\shellmon.exe
    C:\Program Files\BitLord2\BitLord.exe
    c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\explorer.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\cmd.exe
    C:\Windows\system32\DllHost.exe
    c:\windows\system32\rundll32.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\fLuiD

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\fLuiD\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\fLuiD\FAVORI~1

    »»»»»»»»»»»»»»»»»»»»»»»» Desktop

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, following keys are not inevitably infected!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, following keys are not inevitably infected!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, following keys are not inevitably infected!!!

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""
    "LoadAppInit_DLLs"=dword:00000000

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\Windows\\system32\\userinit.exe,"

    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: NVIDIA nForce Networking Controller
    DNS Server Search Order: 192.168.0.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{81638E9A-0E98-4557-9E1E-14373D5BDFE6}: DhcpNameServer=192.168.0.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{81638E9A-0E98-4557-9E1E-14373D5BDFE6}: DhcpNameServer=192.168.0.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{81638E9A-0E98-4557-9E1E-14373D5BDFE6}: DhcpNameServer=192.168.0.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

    »»»»»»»»»»»»»»»»»»»»»»»» End

  • jaideep

    the creator of ie antivirus should be hanged

  • David

    Please help me i'm tryin' spybot but it doesn't work 'til now...HELP

  • ea

    Hi,
    All I can say is, THANK YOU SOO VERY MUCH, I don't know how to express my appreciation! Really killed the bugger!!

    Cheers,
    ea

  • Handyman

    Hi,

    I must thank you so much for this wonderful fix.

    I had Spyware Doctor with Antivirus installed and it could not protect my computer nor removed it. Tried scanning it in safe mode and could not find any problems.
    Was desperate and installed Symantec Norton 360 to scan and found no threats too.

    Both top programs were useless as they were unable to detect the irritating problem i experienced for 3 days.
    I was about to re-format my HDD until I found your website and the SmitfraudFix.exe.

    It works and i sincerely thank you again

    Warmest regards
    Handyman

  • Pingback: Free Program Security Antivirus Guard : » Ie Antivirus or Ieantivirus Causing Havoc among Computer Users

  • Pingback: Ie Antivirus or Ieantivirus Causing Havoc surrounded by Computer Users | Free Download Open Source Code