How to Deal With the “AVG – Your Subscription Has Expired” Scam

Online scams have become increasingly sophisticated, often disguising themselves as legitimate messages to lure unsuspecting users into installing malicious software or revealing sensitive personal information. One such scam is the “AVG – Your Subscription Has Expired” pop-up, which exploits users’ trust in the well-known antivirus software AVG to trick them into downloading potentially harmful software.

Scam Overview

The “AVG – Your Subscription Has Expired” scam presents itself as an urgent notification from AVG, claiming that the user’s antivirus subscription has expired. The message warns the user that their computer is no longer protected and is at risk of malware infections, identity theft, and other security threats. In an attempt to scare the user, the scam offers a discount on AVG Total Security to prompt the download of malicious software.

The scam is not associated with AVG or any legitimate antivirus service. It is simply an attempt to scare users into installing fake security software or visiting malicious websites designed to compromise their device and personal information.

Text Presented in the Scam Pop-Up

The “AVG – Your Subscription Has Expired” pop-up contains alarming and misleading messages to create a sense of urgency:

AVG
Your AVG Security subscription has expired
Your subscription of AVG Total Protection for Windows has expired on March 31, 2025.
After the expiry date has passed, a virus may infect your PC, malicious malware might be installed, or your online identity may be stolen.
Your PC is unprotected, it is exposed to viruses and other malware.

Discount (April 02, 2025):
You are eligible for UP TO 50% OFF
AVG Total Security
20.9.139 (10 DEVICES)
Serial Number:
8A5B4-RV6N-Q8TL-OFG3
Renew Subscription

The pop-up includes a call to action urging the user to renew their subscription, which is a direct attempt to sell the victim fake security software.

Summary of the Scam Details

Detail	Information
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	User’s AVG antivirus subscription has expired, and their computer is at risk of malware.
Disguise	AVG AntiVirus
Related Domains	webmeetwin[.]site
Detection Names	N/A (VirusTotal)
Symptoms	Fake error messages, fake system warnings, hoax computer scan, pop-up errors
Distribution Methods	Compromised websites, rogue online ads, PUAs
Damage	Loss of sensitive private information, monetary loss, identity theft, possible malware infections
Danger Level	High (due to the potential for malware infections, financial loss, and identity theft)

Associated Scams

This particular scam is part of a larger category of online frauds involving fake antivirus subscriptions. Other scams, such as “VirtualShield – Your PC Is Infected With 18 Viruses” and “McAfee – Computer Infected With Potentially Critical Viruses,” employ similar scare tactics to convince users that their devices are at risk, prompting them to download malicious software or pay for fake security programs.

Manual Adware Removal (Windows & Mac)

Step 1: Identify Suspicious Applications

For Windows Users

1. Press Ctrl + Shift + Esc to open the Task Manager.
2. Check the “Processes” tab for unfamiliar or suspicious programs consuming excessive CPU or memory.
3. If you find any, note their names and close them.
4. Open Control Panel > Programs > Programs and Features.
5. Locate the suspicious application, right-click it, and select “Uninstall.”

For Mac Users

1. Open Finder and navigate to Applications.
2. Look for any suspicious or unknown applications.
3. Drag them to the Trash, then right-click on the Trash and select Empty Trash.
4. Open System Preferences > Users & Groups > Login Items and remove any unrecognized startup programs.

Step 2: Remove Adware-Related Browser Extensions

Google Chrome

1. Open Chrome and go to Menu (three dots in the top-right corner) > Extensions.
2. Locate suspicious extensions and click “Remove.”
3. Reset Chrome: Go to Settings > Reset settings > “Restore settings to their original defaults.”

Mozilla Firefox

1. Open Firefox and go to Menu (three lines in the top-right corner) > Add-ons and themes.
2. Locate and remove suspicious extensions.
3. Reset Firefox: Go to Help > More troubleshooting information > “Refresh Firefox.”

Safari (Mac)

1. Open Safari and go to Preferences > Extensions.
2. Locate and remove any unknown extensions.
3. Reset Safari: Go to History > “Clear History.”

Microsoft Edge

1. Open Edge and go to Menu (three dots in the top-right corner) > Extensions.
2. Remove suspicious extensions.
3. Reset Edge: Go to Settings > Reset settings > “Restore settings to their default values.”

Step 3: Delete Adware-Related Files and Folders

For Windows Users

1. Press Win + R, type %AppData%, and press Enter.
2. Look for suspicious folders and delete them.
3. Repeat for %LocalAppData%, %ProgramData%, and %Temp%.

For Mac Users

1. Open Finder, press Shift + Command + G, and enter ~/Library/Application Support/.
2. Locate and delete suspicious folders.
3. Repeat for ~/Library/LaunchAgents/, ~/Library/LaunchDaemons/, and ~/Library/Preferences/.

Step 4: Flush DNS Cache (Recommended)

For Windows Users

1. Open Command Prompt as Administrator.
2. Type ipconfig /flushdns and press Enter.

For Mac Users

1. Open Terminal.
2. Type sudo killall -HUP mDNSResponder and press Enter.

Step 5: Restart Your Computer

Restart your device to complete the manual removal process.

---

Automatic Adware Removal Using SpyHunter (Windows & Mac)

For a hassle-free and effective removal, use SpyHunter, a robust anti-malware tool designed to detect and remove adware efficiently.

Step 1: Download SpyHunter

Download SpyHunter from the official website: Click here to download SpyHunter.

Step 2: Install SpyHunter

Follow the installation instructions based on your operating system:

For Windows Users:

1. Open the downloaded .exe file.
2. Follow the on-screen installation instructions.
3. Launch SpyHunter and allow it to update its malware definitions.

For Mac Users:

1. Open the downloaded .dmg file.
2. Drag and drop SpyHunter into the Applications folder.
3. Launch SpyHunter and allow it to update its malware definitions.

Step 3: Perform a System Scan

1. Open SpyHunter.
2. Click on Start Scan.
3. Wait for the scan to complete.
4. Review the detected threats and click Fix Threats to remove adware.

Step 4: Restart Your Device

After SpyHunter removes the threats, restart your computer to finalize the process.

---

For the most secure and effective removal, we recommend downloading and using SpyHunter: Download SpyHunter Here.

Stay safe and keep your system clean!

---

Conclusion

This scam can have serious consequences for users, potentially leading to identity theft, financial losses, and malware infections. Always exercise caution when faced with alarming pop-ups or offers, and make sure to verify the legitimacy of such messages before taking any action. Stay safe and always opt for trusted sources when renewing software or making online purchases.