Antivirus Soft. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as AntivirusSoft, Anti-virus Soft | Type: Rogue Antispyware
12

Antivirus Soft is a rogue anti-virus program that gives false reports of threats and displays bogus pop-ups to make you think that your computer is infected with malware. This fake program is a clone of Antivirus Live and Antivirus System PRO malware. Usually, such rogue programs come from various misleading websites, fake online scanners, but it can be also promoted in Facebook, MySpace and similar websites. Once installed, it will ostensibly scan your computer for malware and display a variety of infections that can be only removed with a full version of the program. However, don’t buy it. Keep in mind that the scan results are absolutely false. This is nothing more but a scam. Please remove Antivirus Soft from your computer as soon as possible. Use the removal guide below.

Antivirus Soft graphical user interface
[Figure 1. Antivirus Soft graphical user interface]

When running, Anti-virus Soft will also display many fake security alerts and notifications. For example, you may see fake pop-ups with the following text:

Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.

And there is also an error message that states “Application can not be executed”. This one will be displayed every time you try to launch an anti-spyware or anti-virus software. What is more, Antivirus Soft will change Internet Explorer’s settings. A proxy server will be added under the LAN settings, so that you cannot browse to any web site other than the site for Antivirus Soft. As you can see, this virus is quite irritating. Unfortunately, it can’t be removed as a regular program. It won’t let you to remove its files manually either. The removal guide below will show you how to get rid of Antivirus Soft from the system once and for all.

Antivirus Soft removal instructions

1. Restart your computer. As your computer restarts but before Windows launches, tap “F8” key constantly. Use the arrow keys to highlight the “Safe Mode with Networking” option as shown in the image below, and then press ENTER.

2. Open Internet Explorer. Click on the Tools menu and then select Internet Options.

3. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.

4. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.

5. Download an automatic removal tool from this page and run a full system scan. Or download it form alternative location.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Antivirus Soft you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Antivirus Soft. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Antivirus Soft manual removal:

Kill processes:
[RANDOM CHARACTERS]sysguard.exe, for example ghrtsysguard.exe

[RANDOM CHARACTERS]sftav.exe



Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun ""

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun ""

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" = "http=127.0.0.1:5555"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = ".exe"

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = ""

HKEY_CURRENT_USERSoftwareAvScan

Delete files:
Windows XP:

%UserProfile%\Local Settings\Application Data\\[RANDOM CHARACTERS]sysguard.exe



Windows Vista and Windows 7:

%UserProfile%\AppData\Local\\[RANDOM CHARACTERS]sysguard.exe

%UserProfile%\AppData\Local\\[RANDOM CHARACTERS]sftav.exe

Delete directories:
%UserProfile%Local SettingsApplication Data[RANDOM CHARACTERS] (Win XP)

%UserProfile%AppDataLocal (Win Vista & 7)

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Guest

    A friend of mine came to me with this problem and asked me to fix it for him…trying it now…will comment again with the results…

  • Guest

    someone???? creates and PCTOOLS and others benefits

  • Tev

    I used the manual removal method to successfully remove the Antivirus Soft piece of crap.

    Thanks for the info!

  • Guest

    It is free? I downloaded it sucessfully and it then ran the scan program, but when I went to click on “Fix checked boxes” it brought me to a page to pay for it? Is this accurate or is it the Antivirus Soft virus getting in the way again?
    Thanks, MF

  • Guest

    It's perfectly legitimate and free scanner, but you have to buy it in order to remove the infections.

  • Guest

    I just removed the Antivirus Soft by using instructions on bleepingcomputer.com with a free program. The above one is not free.

  • Guest

    How can I do the manual way if I can't open anything?

  • Guest

    you have to go into safe mode with networking to work which gives u access to internet and then u should download malawarebytes which u perform a full scan and it deletes this piece of crap antivirus soft program

  • Guest

    It keeps bringing me to start up screen and tells me to activate product code for windows. It will not even let me start in safe mode. How do I fix this?

  • NEED HELP

    no such directory
    HKEY_CURRENT_USERSoftwareAvScan
    but there is a directory
    HKEY_CURRENT_USERSoftwareAvsoft
    is it the same
    can i delete it safely

  • Guest

    Yo lo he solucionado restaurando el sistema al día anterior de que me entró el virus. Despues de probar mil cosas, es la única que funcionó. Facil y rapido de hacer

  • Guest

    I agree with Senor ?'s last comment. I tried Malwarebytes – no joy. A system restore was the only thing that worked. But I'm going through manually as well…

  • Guest

    I have been trying to remove antivirus soft all day with the same problems. Would like to know if you managed to remove it. Heres hoping

  • Guest

    I use netscape instead of internet explorer so how do I do the above instructions, help please

  • Guest

    i deleted the Avsoft directory and all the other ones listed above. restarted the computer. the virus seems to have be deleted from my computer.

    thanks.

  • Guest

    In trying the above method, I get to disabeling the proxy server for your LAN. I cannot however apply the settings nor get on internet explorer. I am working in the safe mode. What now?

  • Guest

    malwarebytes worked for me…thanks

  • Guest

    Antivirus Soft will be shut down and prosecuted. Call your credit card company if you gave them your credit card number.

  • Guest

    non perdete tempo a seguire le istruzioni, arrivati in fondo chiedono i soldi

  • Guest

    SYSTEM RESTORE WOKED FOR ME.

  • Guest

    This fix worked perfectly. Follow instructions!

  • Average_Cat

    Yeah System Restore is the trick. I went back 2 weeks because I'm paranoid and it worked. No more kids on my computer. First virus I've had on this machine and I've had it 6 years. That's a long time with no problems.

  • Guest

    System Restore worked for me. Wow, I can't believe this happened to so many people. I've not even had a virus before this.

  • Unkd

    This happened to me yesterday randomly, I don't know how or why I got it. I did a system restore, it didn't work. I'm at another computer now, mines trying to reboot again, hopefully it works this time. This time, no backup.

    I will try this ASAP when I get home. I hope it works!

  • Guest

    They're trying to get smart. The process name that I had to end was tldasftav.exe

  • Guest

    I used the first half of these directions and then improvised. You do not need to purchase the antivirus software!! SYSTEM RESTORE! It works. This company should be put in jail!

  • Guest

    To skip all that just run your computer in “Safe Mode”, Then system restore it to 4-5days before this happened to your computer. Then it should be gone if not contact your internet provider.

  • Guest

    Somehow managed to get this thing and was freaking out. Fortunately, system restore was the easiest way to go. Thanks to the first user to post a comment suggesting system restore.

  • Guest

    Thanks for the system restore Idea, Worked nicely, Time to put parental controls on.

  • Guest

    ANITVIRUS SOFT SUCKS BOOTY!!

  • Guest

    Actually, if you want it to just be quick and easy.. Just go into safe mode and run a system restore to the day before the “dumb” virus hit. lol, but seriously.. It works and the best part is you dont have to download anything.. Bye

  • Guest

    Thanks for the system restore suggestion!

  • Guest

    Thanks so much for the advice. That antivirus soft is nasty.

  • Guest

    Uh yeah, I have spyware doctor…the full PAID version. With intelliguard active. And i still got this virus. STOPzilla sucks. It wont work so well once Antivirus Soft disables it from the inside.

  • Guest

    Yep. System Restore did the trick. THANK YOU!!!

  • Guest

    Whew…the system restore worked. However, did that really remove the virus from my computer? It seems like it may still be lurking somewhere, able to strike again.

  • James

    system restore worked great. thanks alot!

  • Prasad

    Antivirus Soft manual removal steps really helped me alot to get rid of this annoying virus. Thanks

  • Kim and Katie

    Doing a System Restore in Safe Mode worked! Yes, these people sending out viruses should be in prison!

  • Guest

    did anyone with avg get this? also, if you do the system restore, does that get rid of the infected registries, files, and directories?

  • By Richard 2010-03-24

    I got this virus even though I was using AVG and a firewall. I got it on website by WFAA tv station in Dallas, TX. Have called them and they are checking on it.

  • Guest

    yes, I have avg, and still got it

  • Guest

    а вы можете на русском статью прописать?

  • Guest

    System restored got rid of this. But then it came back in a few days. I did another restore and it came back within the same hour. Does anyone know how to get rid of it PERMENTLY?

  • Guest

    This F-ING virus knocked out my PC for 5 days..
    Resolution: Follow the removal process as indicated up until the the Download section. ( if you have Norton Anti Virus the run an all system scan) it works for me great. or you can used another virus removal tool.

  • Guest

    System Resore did the trick. THANK YOU

  • Guest

    yes, system restore is the easiest way. Thank you so much to the first poster!!

  • Guest

    thank very much this antivirus soft is a pain!!!

  • Guest

    i still cant take it out

  • Guest

    Sweet Tutorial and thanks a lot. I did a system restore (per first commenter) and worked like a charm. Thank you for helping with a really wicked virus. Appreciated!

  • <TROJANHATERt>

    thank you SO MUCH

  • Guest

    Thanks so much for this tutorial. I used system restore as well after a certain step and antivirus soft is gone. What an awful virus. I can't thank you enough for saving my computer. 🙂

  • Guest

    Guys there are more then this one out there if i diddent have a backup i would be formatting THX all but it blocks windows defender becarefull bout that

  • Guest

    I finally managed to get this POS off my computer: it was hiding under the name %UserProfile%AppDataLocalhevmwfrdqpimrlaitssd.exe

  • ARrgh

    thanks for posting this one… really helps out a lot when doing some troubleshooting.

  • Guest

    wtf it doesnt even work i downloaded spyware doctor and it said i had to buy it to remove the virus wtf!!!!

  • spencer

    thx so much for tutorial btw avira antivir personal works well

  • Guest

    Possible new issue is that I am not allowed to reboot in Safe Mode with Networking. The only mode that doesnt restart back at the safe mode menu is Last Known Good Configuration, which is most likely the corrupted version. Any ideas would be great

  • Guest

    Lol all i had to do is turn off and on my computer =D (hopefully that helped)

  • j-streetz

    namcrontssd.exe

    hidden files and folders should be 2 files of this virus in
    c/documents and settings/user.eg john/local settings/application data/vuiahfidy

    or just search namcrontssd.exe and be sure to search hidden files and folders then simply deleate!!!

  • Guest

    System Restore worked for me (hopefully, I'll past back in a week if it worked long term)

    Thanks guyz for your help ^_^

    Whoever made Antivirus Soft should be executed >_

  • Guest

    Do I run the system scan in Safe Mode or should I reboot then run the scan?

  • Guest

    THANK YOU. SO MUCH. YOU SAVED MY COMPUTER. ALSO GIVE SOME CREDIT TO THE PERSON WITH THE SYSTEM RESTORE SUGGESTION. THANK YOU ALL.

  • Guest

    Alright, as I said before, I'm posting back one week after system restore. It's worked well so far, no problems since last week.

  • Guest

    Alright, so It won't let me run it in safe mode, and tells me to put it back into normal mode and so I did. It still won't run because the virus has blocked it. Help Please!

  • Guest

    If you switch to another user, press ctrl+alt+delete, then click on the proccess tab, and try to disable it it will not work, however you can overide the internet portion of the virus, by typing an “s” sfter the http

  • Guest

    Can't thank this page enough!! I almost succumbed to purchasing the full version til a little doubt set in and made me google 'antivirus soft'. Heaps of thanks go out to this page, and pages similar, that combat malware etc. THANK YOU!!!!!!!!!!!!!!!!

  • Guest

    if so many people knows da truth about this scam why wont the internet police ban it… and isnt that scam illegal… when i find out who made antivirus soft imma kick his nerdy face with my gangsta friends… -.-

  • Guest

    Wait, do you have to pay for the thingy you download?

  • it keep living.. even how many i delete this…

  • Guest

    It killed my hard drive. I got the bsod and I can't do anything now. I've had to order a new hard drive and I'll have to pay someone to try and recover files. How is this legal?

  • Guest

    Ok, ive tried removing it several times and remain unsuccessful. What are my other options? I've run a full scan which took 2 1/2 hours and its still popping up. Please help.

  • drexlerf

    THANK YOU SO MUCH!!!
    Stupid antivirus soft, ruining my computer
    anyways.. why did they make viruses in the first place??

  • Guest

    Killed my hard drive too. Be careful with torrents!

  • Ed

    Found it in Windows 7 in temp under the user directory. dqmwxluxsik.exe

  • Ben

    The instructions on this website really work. Thanks you so much!