Remove Antivirus Soft. Description and removal instructions

 
Title: Antivirus Soft
Also known as: AntivirusSoft, Anti-virus Soft
Type: Spyware
Severity scale:Antivirus Soft severity is 71  (71 / 100)
 
Antivirus Soft is a rogue anti-virus program that gives false reports of threats and displays bogus pop-ups to make you think that your computer is infected with malware. This fake program is a clone of Antivirus Live and Antivirus System PRO malware. Usually, such rogue programs come from various misleading websites, fake online scanners, but it can be also promoted in Facebook, MySpace and similar websites. Once installed, it will ostensibly scan your computer for malware and display a variety of infections that can be only removed with a full version of the program. However, don't buy it. Keep in mind that the scan results are absolutely false. This is nothing more but a scam. Please remove Antivirus Soft from your computer as soon as possible. Use the removal guide below.

Antivirus Soft graphical user interface
[Figure 1. Antivirus Soft graphical user interface]

When running, Anti-virus Soft will also display many fake security alerts and notifications. For example, you may see fake pop-ups with the following text:


Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.

And there is also an error message that states "Application can not be executed". This one will be displayed every time you try to launch an anti-spyware or anti-virus software. What is more, Antivirus Soft will change Internet Explorer's settings. A proxy server will be added under the LAN settings, so that you cannot browse to any web site other than the site for Antivirus Soft. As you can see, this virus is quite irritating. Unfortunately, it can't be removed as a regular program. It won't let you to remove its files manually either. The removal guide below will show you how to get rid of Antivirus Soft from the system once and for all.

Antivirus Soft removal instructions

1. Restart your computer. As your computer restarts but before Windows launches, tap "F8" key constantly. Use the arrow keys to highlight the "Safe Mode with Networking" option as shown in the image below, and then press ENTER.




2. Open Internet Explorer. Click on the Tools menu and then select Internet Options.


3. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.


4. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.


5. Download an automatic removal tool from this page and run a full system scan. Or download it form alternative location.


Related files: [RANDOM CHARACTERS]sysguard.exe, Windows XP:, Windows Vista and Windows 7:, [RANDOM CHARACTERS]sftav.exe

Antivirus Soft properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Antivirus Soft removal:

remover for Antivirus Soft

Antivirus Soft manual removal:

Kill processes:
[RANDOM CHARACTERS]sysguard.exe, for example ghrtsysguard.exe [RANDOM CHARACTERS]sftav.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\AvScan
Delete files:
Windows XP: %UserProfile%\\Local Settings\\Application Data\\\\[RANDOM CHARACTERS]sysguard.exe Windows Vista and Windows 7: %UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sysguard.exe %UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sftav.exe
Delete directories:
%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\ (Win XP)
%UserProfile%\AppData\Local\\ (Win Vista & 7)

Other programs to remove Antivirus Soft:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 01/02/10
Information updated: 02/06/10

Additional resources related to Antivirus Soft:

Attention: If you know or you have a website or page about Antivirus Soft removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Antivirus Soft parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2010-06-02 05:06:29
It killed my hard drive. I got the bsod and I can't do anything now. I've had to order a new hard drive and I'll have to pay someone to try and recover files. How is this legal?

2. by .... 2010-06-01 19:06:12
it keep living.. even how many i delete this...

3. by . 2010-06-01 05:06:37
Wait, do you have to pay for the thingy you download?

4. by . 2010-05-25 22:05:22
if so many people knows da truth about this scam why wont the internet police ban it... and isnt that scam illegal... when i find out who made antivirus soft imma kick his nerdy face with my gangsta friends... -.-

5. by . 2010-05-25 18:05:59
Can't thank this page enough!! I almost succumbed to purchasing the full version til a little doubt set in and made me google 'antivirus soft'. Heaps of thanks go out to this page, and pages similar, that combat malware etc. THANK YOU!!!!!!!!!!!!!!!!

6. by . 2010-05-24 14:05:28
Alright, so It won't let me run it in safe mode, and tells me to put it back into normal mode and so I did. It still won't run because the virus has blocked it. Help Please!

7. by . 2010-05-24 14:05:43
If you switch to another user, press ctrl+alt+delete, then click on the proccess tab, and try to disable it it will not work, however you can overide the internet portion of the virus, by typing an "s" sfter the http

8. by . 2010-05-15 13:05:23
Alright, as I said before, I'm posting back one week after system restore. It's worked well so far, no problems since last week.

9. by . 2010-05-11 11:05:46
need hlp

10. by . 2010-05-09 19:05:53
THANK YOU. SO MUCH. YOU SAVED MY COMPUTER. ALSO GIVE SOME CREDIT TO THE PERSON WITH THE SYSTEM RESTORE SUGGESTION. THANK YOU ALL.

11. by . 2010-05-09 19:05:50
Do I run the system scan in Safe Mode or should I reboot then run the scan?

12. by . 2010-05-08 09:05:32
System Restore worked for me (hopefully, I'll past back in a week if it worked long term)

Thanks guyz for your help ^_^

Whoever made Antivirus Soft should be executed >_

13. by j-streetz. 2010-05-06 14:05:36
namcrontssd.exe

hidden files and folders should be 2 files of this virus in
c/documents and settings/user.eg john/local settings/application data/vuiahfidy

or just search namcrontssd.exe and be sure to search hidden files and folders then simply deleate!!!

14. by . 2010-05-04 17:05:41
Lol all i had to do is turn off and on my computer =D (hopefully that helped)

15. by . 2010-05-03 10:05:20
Possible new issue is that I am not allowed to reboot in Safe Mode with Networking. The only mode that doesnt restart back at the safe mode menu is Last Known Good Configuration, which is most likely the corrupted version. Any ideas would be great

16. by spencer. 2010-05-01 00:05:34
thx so much for tutorial btw avira antivir personal works well

17. by . 2010-04-30 22:04:13
wtf it doesnt even work i downloaded spyware doctor and it said i had to buy it to remove the virus wtf!!!!

18. by ARrgh. 2010-04-28 20:04:27
thanks for posting this one... really helps out a lot when doing some troubleshooting.

19. by . 2010-04-26 21:04:09
I finally managed to get this POS off my computer: it was hiding under the name %UserProfile%AppDataLocalhevmwfrdqpimrlaitssd.exe

20. by . 2010-04-26 16:04:28
Guys there are more then this one out there if i diddent have a backup i would be formatting THX all but it blocks windows defender becarefull bout that

See more comments about Antivirus Soft >>>
Related news:
Similar parasites:
Related articles:
Related discussions: