AVG Antivirus 2011

There is a phony version of AVG Antivirus 2011 going around. It tries to trick users into paying a license fee to avoid the annoying popups it produces. The real hack is that it also adds some registry entries that make most major browsers run the fake program instead.

If you want to get around this, rename your browser executable file names. Get rid of "avg.exe: that is located in C:\Program Files\AVG Antivirus 2011. You should also delete C:\Windows\system32\iesafemode.exe. A good antivirus such a Spyware Doctor can help rid you of this nuisance.

How does the program hijack the other browsers? It adds some registry keys in HKEY LOCAL MACHINE. Specifially there is an ImageFileExecution Options location in the registry that allows you to redirect iexplore.exe, chrome.exe, firefox.exe, and any other executable name. The fake AVG Antivirus 2011 intercepts these and all other popular web browsers. What an effort.