How to remove WinPC Antivirus

WinPC Antivirus Description

WinPC Antivirus is a fake antispyware application. WinPC Antivirus is promoted as an anti-virus / online scanner and firewall, but it does not perform any of these tasks. WinPC Antivirus just imitates the look and feel of a real security application while in fact it is a byproduct of a serious infection:


WinPC Antivirus is another clone of XP Police Antivirus rogue anti-spyware and copy of WinPC Defender rogue software. It displays fake or exaggerated list of spyware threats and tries to frighten the user into purchasing of the "full" version of that rogue software.

Computers infected with WinPC Antivirus may have their search results misdirected / redirected to bogus sites, and existing antivirus software may become disabled.

WinPC Antivirus displays annoying warning messages from the Windows taskbar informing about detected threats. If the user chooses the option to remove detected "threat", he/she will be asked to buy the full version of WinPC Antivirus.

WinPC Antivirus automatic detection

Suggested WinPC Antivirus Removal Tool

How to remove WinPC Antivirus manually

First thing you want to do is to bookmark this page because you will need to refer to it several times duting manual removal (click here to bookmark this page).
You must perform the following tasks to remove WinPC Antivirus malware manually: stop all malicious processes, unregister malicious DLL files, delete all files and registry keys installed by WinPC Antivirus files and block WinPC Antivirus redistribution websites.

During installation WinPC Antivirus registers itself in the list of installed applications. You can try to remove WinPC Antivirus using "Control Panel" -> "Add or Remove Programs" utility, however some hidden files may be left behind on the system.

WinPC Antivirus manual removal instructions

Stop all WinPC Antivirus malicious processes:

• pcantivirus.exe
• winav.exe
• winav[1].exe

Unregister WinPC Antivirus malicious DLLs:

• ieocx.dll

Delete all files installed by WinPC Antivirus:

• %User Profile%\Application Data\pcantivirus.exe
• %User Profile%\Application Data\winav.exe
• %User Profile%\Application Data\winav[1].exe
• %User Profile%\Desktop\WinPC Antivirus.LNK
• %User Profile%\Start Menu\WinPC Antivirus.LNK
• %Windows%\ieocx.dll

Delete all registry keys installed by WinPC Antivirus:

• %HKCR%\CLSID\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
• %HKCR%\IEocxApp.IEocx
• %HKCR%\IEocxApp.IEocx.1
• %HKCR%\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
• %HKCR%\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
• %HKCR%\TypeLib\{A54DC52D-7AAD-4D40-A126-337211631EDC}
• %HKCU%\Control Panel\don't load "scui.cpl"
• %HKCU%\Control Panel\don't load "wscui.cpl"
• %HKCU%\Software\Microsoft\Windows\CurrentVersion\Run "sysav"
• %HKCU%\Software\WinPC Antivirus
• %HKLM%\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
• %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "Content"

Block WinPC Antivirus redistribution websites:

• win-pc-antivirus-2009.com
• winpc-antivirus2009.com
• winpcantivirus2010.com

Once you complete the above manual removal steps, download this scanner to scan your computer for any WinPC Antivirus leftovers.

Similar Malware Threats

• WinPC Defender
• XP Police Antivirus