Most rogue antivirus programs use deceptive tactics to promote their product, but AntivirusBest is probably the worst of them. It uses every means of promotion that it can. It uses Trojans and fake online scanners to invade computers. It harasses the user with fake security warnings that claim there are infections and it performs phony scans that show there are infections as well. All of these reports are false and yet they tell the user to buy AntivirusBest in order to remove the threats.

On top of this, AntivirusBest installs a browser helper object that displays other warnings and redirects the browser to sites promoting the rogue. The software will also produce a false “Blue Screen of Doom,” which is a type of crash, and it will claim that it is due to malware. The blue screen also says that the user should use the rogue software to remove the infections.

You should take immediate action if this rogue has infected your computer. You can manually remove it by stopping the following processes (but be careful to only stop the correct “svchost.exe” or your system will crash):

abest.exe
svchost.exe
installer.exe

Relative file contents:

ABEST.CAB,
uninstall.lnk,
AntivirusBEST.lnk,
installer.exe,
svchost.exe,
abest.exe,
QWProtect.dll

Remove the following registry entries:

HKEY_CURRENT_USER\Software\ABEST\ABEST
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\QWProtect.DLL
HKEY_CLASSES_ROOT\CLSID\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_CLASSES_ROOT\Interface\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO
HKEY_CLASSES_ROOT\QWProtect.QWProtectBHO.1
HKEY_CLASSES_ROOT\TypeLib\{684A7904-2593-4BBE-A90E-CDAF2AC606AE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AntivirusBEST”

Unregister this DLL:

qwprotect.dll

Then, delete the following files:

qwprotect.dll
abest.exe
svchost.exe
installer.exe
AntivirusBEST.lnk
Uninstall.lnk
ABEST.CAB

Finally, delete these directories:

c:\documents and settings\All Users\Start Menu\Programs\AntiVirusBEST
c:\Documents and Settings\All Users\Application Data\AB

While removing AntivirusBest manually is possible, it is very dangerous. Stopping a process is easy, but one of the processes that this malware uses has the same name as an important and legitimate process. If you stop the wrong one, your computer will crash. Even if you were to correctly remove this malware, your computer could still be infected with other malware.

Using ZookaWare PC Cleaner is a surefire way to free your computer from AntivirusBest and other malware. It is the only real antispyware that is guaranteed to remove 100% of spyware and malware. You can trust ZookaWare PC Cleaner because it was created by ZookaWare, a company committed to complete computer care. They are members in good standing with the Better Business Bureau. In order to keep the quality of their award winning service up, they use a spyware hunting robot to search through over 100 million websites every day for new threats. So, if you want a quality antispyware that can be trusted and is always up to date, then you want ZookaWare PC Cleaner.