NEWS
PARASITES
SOFTWARE
FORUM
DIRECTORY

 
 
 
 
 
 
  
Title: Antivirus Soft
Type: Rogue Antispyware

Remove Antivirus Soft. Removal instructions


 
Also known as: AntivirusSoft, Anti-virus Soft
Severity scale:Antivirus Soft severity is 71  (71 / 100)
 
Antivirus Soft is a rogue anti-virus program that gives false reports of threats and displays bogus pop-ups to make you think that your computer is infected with malware. This fake program is a clone of Antivirus Live and Antivirus System PRO malware. Usually, such rogue programs come from various misleading websites, fake online scanners, but it can be also promoted in Facebook, MySpace and similar websites. Once installed, it will ostensibly scan your computer for malware and display a variety of infections that can be only removed with a full version of the program. However, don't buy it. Keep in mind that the scan results are absolutely false. This is nothing more but a scam. Please remove Antivirus Soft from your computer as soon as possible. Use the removal guide below.

Antivirus Soft graphical user interface
[Figure 1. Antivirus Soft graphical user interface]

When running, Anti-virus Soft will also display many fake security alerts and notifications. For example, you may see fake pop-ups with the following text:


Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.

And there is also an error message that states "Application can not be executed". This one will be displayed every time you try to launch an anti-spyware or anti-virus software. What is more, Antivirus Soft will change Internet Explorer's settings. A proxy server will be added under the LAN settings, so that you cannot browse to any web site other than the site for Antivirus Soft. As you can see, this virus is quite irritating. Unfortunately, it can't be removed as a regular program. It won't let you to remove its files manually either. The removal guide below will show you how to get rid of Antivirus Soft from the system once and for all.

Antivirus Soft removal instructions

1. Restart your computer. As your computer restarts but before Windows launches, tap "F8" key constantly. Use the arrow keys to highlight the "Safe Mode with Networking" option as shown in the image below, and then press ENTER.




2. Open Internet Explorer. Click on the Tools menu and then select Internet Options.


3. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.


4. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.


5. Download an automatic removal tool from this page and run a full system scan. Or download it form alternative location.

Related files: [RANDOM CHARACTERS]sysguard.exe, Windows XP:, Windows Vista and Windows 7:, [RANDOM CHARACTERS]sftav.exe

Antivirus Soft properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Antivirus Soft removal:

remover for Antivirus Soft
SpyHunter is recommended remover to uninstall Antivirus Soft. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Antivirus Soft and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Antivirus Soft using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
STOPzilla
download | review
Tested and Confirmed! STOPzilla removes Antivirus Soft (2010-02-01 00:07:57)
Malwarebytes Anti Malware
download | review
Tested and Confirmed! Malwarebytes Anti Malware removes Antivirus Soft (2010-02-01 00:07:57)
Spyware Doctor
download | review | tutorial
We are testing Spyware Doctor's efficiency at removing Antivirus Soft (2011-12-25 14:16:27)
XoftSpySE Anti Spyware
download | review

Antivirus Soft manual removal:

Kill processes:
[RANDOM CHARACTERS]sysguard.exe, for example ghrtsysguard.exe [RANDOM CHARACTERS]sftav.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\AvScan
HELP:
how to remove registry entries

Delete files:
Windows XP: %UserProfile%\\Local Settings\\Application Data\\\\[RANDOM CHARACTERS]sysguard.exe Windows Vista and Windows 7: %UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sysguard.exe %UserProfile%\\AppData\\Local\\\\[RANDOM CHARACTERS]sftav.exe
HELP:
how to remove harmful files

Delete directories:
%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\ (Win XP)
%UserProfile%\AppData\Local\\ (Win Vista & 7)
Information added: 2010-02-01 00:07:57
Information updated: 2011-12-25 11:39:12

Additional resources related to Antivirus Soft:

Attention: If you know or you have a website or page about Antivirus Soft removal, feel free to add a link to this list: add url
more resources
0
0
<Guest>
A friend of mine came to me with this problem and asked me to fix it for him...trying it now...will comment again with the results...
2010 02 08
0
0
<Guest>
someone???? creates and PCTOOLS and others benefits
2010 02 10
0
0
Tev
I used the manual removal method to successfully remove the Antivirus Soft piece of crap.

Thanks for the info!
2010 02 10
0
0
<Guest>
It is free? I downloaded it sucessfully and it then ran the scan program, but when I went to click on "Fix checked boxes" it brought me to a page to pay for it? Is this accurate or is it the Antivirus Soft virus getting in the way again?
Thanks, MF
2010 02 11
0
0
<Guest>
It's perfectly legitimate and free scanner, but you have to buy it in order to remove the infections.
2010 02 11
0
0
<Guest>
I just removed the Antivirus Soft by using instructions on bleepingcomputer.com with a free program. The above one is not free.
2010 02 13
0
0
<Guest>
How can I do the manual way if I can't open anything?
2010 02 14
0
0
<Guest>
you have to go into safe mode with networking to work which gives u access to internet and then u should download malawarebytes which u perform a full scan and it deletes this piece of crap antivirus soft program
2010 02 15
0
0
<Guest>
It keeps bringing me to start up screen and tells me to activate product code for windows. It will not even let me start in safe mode. How do I fix this?
2010 02 16
0
0
NEED HELP
no such directory
HKEY_CURRENT_USERSoftwareAvScan
but there is a directory
HKEY_CURRENT_USERSoftwareAvsoft
is it the same
can i delete it safely
2010 02 16
0
0
<Guest>
Yo lo he solucionado restaurando el sistema al día anterior de que me entró el virus. Despues de probar mil cosas, es la única que funcionó. Facil y rapido de hacer
2010 02 18
0
0
<Guest>
I agree with Senor ?'s last comment. I tried Malwarebytes - no joy. A system restore was the only thing that worked. But I'm going through manually as well...
2010 02 18
0
0
<Guest>
I have been trying to remove antivirus soft all day with the same problems. Would like to know if you managed to remove it. Heres hoping
2010 02 18
0
0
<Guest>
i deleted the Avsoft directory and all the other ones listed above. restarted the computer. the virus seems to have be deleted from my computer.

thanks.
2010 02 19
0
0
<Guest>
I use netscape instead of internet explorer so how do I do the above instructions, help please
2010 02 19
0
0
<Guest>
In trying the above method, I get to disabeling the proxy server for your LAN. I cannot however apply the settings nor get on internet explorer. I am working in the safe mode. What now?
2010 02 23
0
0
<Guest>
You guys are dicks trying to make people buy software from an affiliate program. You have to be the scum of the earth when people are desperate.

Do not download any of their links: they are trying to make money off you. Just get MalwareBytes instead . . it's free.
2010 02 23
0
0
<Guest>
malwarebytes worked for me...thanks
2010 02 23
0
0
<Guest>
Antivirus Soft will be shut down and prosecuted. Call your credit card company if you gave them your credit card number.
2010 02 25
0
0
<Guest>
non perdete tempo a seguire le istruzioni, arrivati in fondo chiedono i soldi
2010 02 25
0
0
<Guest>
SYSTEM RESTORE WOKED FOR ME.
2010 02 27
0
0
<Guest>
This fix worked perfectly. Follow instructions!
2010 02 28
0
0
Average_Cat
Yeah System Restore is the trick. I went back 2 weeks because I'm paranoid and it worked. No more kids on my computer. First virus I've had on this machine and I've had it 6 years. That's a long time with no problems.
2010 02 28
0
0
Unkd
This happened to me yesterday randomly, I don't know how or why I got it. I did a system restore, it didn't work. I'm at another computer now, mines trying to reboot again, hopefully it works this time. This time, no backup.

I will try this ASAP when I get home. I hope it works!
2010 03 01
0
0
<Guest>
System Restore worked for me. Wow, I can't believe this happened to so many people. I've not even had a virus before this.
2010 03 01
0
0
<Guest>
They're trying to get smart. The process name that I had to end was tldasftav.exe
2010 03 02
0
0
<Guest>
I used the first half of these directions and then improvised. You do not need to purchase the antivirus software!! SYSTEM RESTORE! It works. This company should be put in jail!
2010 03 03
0
0
<Guest>
To skip all that just run your computer in "Safe Mode", Then system restore it to 4-5days before this happened to your computer. Then it should be gone if not contact your internet provider.
2010 03 05
0
0
<Guest>
Somehow managed to get this thing and was freaking out. Fortunately, system restore was the easiest way to go. Thanks to the first user to post a comment suggesting system restore.
2010 03 06
0
0
<Guest>
Thanks for the system restore Idea, Worked nicely, Time to put parental controls on.
2010 03 06
0
0
<Guest>
ANITVIRUS SOFT SUCKS BOOTY!!
2010 03 06
0
0
<Guest>
Actually, if you want it to just be quick and easy.. Just go into safe mode and run a system restore to the day before the "dumb" virus hit. lol, but seriously.. It works and the best part is you dont have to download anything.. Bye
2010 03 07
0
0
<Guest>
Thanks for the system restore suggestion!
2010 03 07
0
0
<Guest>
Thanks so much for the advice. That antivirus soft is nasty.
2010 03 08
0
0
<Guest>
wow excellent
2010 03 13
0
0
<Guest>
Uh yeah, I have spyware doctor...the full PAID version. With intelliguard active. And i still got this virus. Spyware Doctor sucks. It wont work so well once Antivirus Soft disables it from the inside.
2010 03 13
0
0
<Guest>
Yep. System Restore did the trick. THANK YOU!!!
2010 03 15
0
0
<Guest>
Whew...the system restore worked. However, did that really remove the virus from my computer? It seems like it may still be lurking somewhere, able to strike again.
2010 03 18
0
0
James
system restore worked great. thanks alot!
2010 03 19
0
0
Prasad
Antivirus Soft manual removal steps really helped me alot to get rid of this annoying virus. Thanks
2010 03 19
0
0
Kim and Katie
Doing a System Restore in Safe Mode worked! Yes, these people sending out viruses should be in prison!
2010 03 21
0
0
<Guest>
did anyone with avg get this? also, if you do the system restore, does that get rid of the infected registries, files, and directories?
2010 03 22
0
0
By Richard 2010-03-24
I got this virus even though I was using AVG and a firewall. I got it on website by WFAA tv station in Dallas, TX. Have called them and they are checking on it.
2010 03 24
0
0
<Guest>
yes, I have avg, and still got it
2010 03 24
0
0
<Guest>
а вы можете на русском статью прописать?
2010 03 25
0
0
<Guest>
System restored got rid of this. But then it came back in a few days. I did another restore and it came back within the same hour. Does anyone know how to get rid of it PERMENTLY?
2010 03 26
0
0
<Guest>
This F-ING virus knocked out my PC for 5 days..
Resolution: Follow the removal process as indicated up until the the Download section. ( if you have Norton Anti Virus the run an all system scan) it works for me great. or you can used another virus removal tool.
2010 03 27
0
0
<Guest>
System Resore did the trick. THANK YOU
2010 03 27
0
0
<Guest>
yes, system restore is the easiest way. Thank you so much to the first poster!!
2010 03 28
0
0
<Guest>
thank very much this antivirus soft is a pain!!!
2010 03 29
0
0
<Guest>
i still cant take it out
2010 03 29
0
0
<Guest>
Sweet Tutorial and thanks a lot. I did a system restore (per first commenter) and worked like a charm. Thank you for helping with a really wicked virus. Appreciated!
2010 04 19
0
0
<TROJANHATERt>
thank you SO MUCH
2010 04 20
0
0
<Guest>
Thanks so much for this tutorial. I used system restore as well after a certain step and antivirus soft is gone. What an awful virus. I can't thank you enough for saving my computer. :)
2010 04 24
0
0
<Guest>
Guys there are more then this one out there if i diddent have a backup i would be formatting THX all but it blocks windows defender becarefull bout that
2010 04 26
0
0
<Guest>
I finally managed to get this POS off my computer: it was hiding under the name %UserProfile%AppDataLocalhevmwfrdqpimrlaitssd.exe
2010 04 26
0
0
ARrgh
thanks for posting this one... really helps out a lot when doing some troubleshooting.
2010 04 28
0
0
<Guest>
wtf it doesnt even work i downloaded spyware doctor and it said i had to buy it to remove the virus wtf!!!!
2010 04 30
0
0
spencer
thx so much for tutorial btw avira antivir personal works well
2010 05 01
0
0
<Guest>
Possible new issue is that I am not allowed to reboot in Safe Mode with Networking. The only mode that doesnt restart back at the safe mode menu is Last Known Good Configuration, which is most likely the corrupted version. Any ideas would be great
2010 05 03
0
0
<Guest>
Lol all i had to do is turn off and on my computer =D (hopefully that helped)
2010 05 04
0
0
j-streetz
namcrontssd.exe

hidden files and folders should be 2 files of this virus in
c/documents and settings/user.eg john/local settings/application data/vuiahfidy

or just search namcrontssd.exe and be sure to search hidden files and folders then simply deleate!!!
2010 05 06
0
0
<Guest>
System Restore worked for me (hopefully, I'll past back in a week if it worked long term)

Thanks guyz for your help ^_^

Whoever made Antivirus Soft should be executed >_
2010 05 08
0
0
<Guest>
Do I run the system scan in Safe Mode or should I reboot then run the scan?
2010 05 09
0
0
<Guest>
THANK YOU. SO MUCH. YOU SAVED MY COMPUTER. ALSO GIVE SOME CREDIT TO THE PERSON WITH THE SYSTEM RESTORE SUGGESTION. THANK YOU ALL.
2010 05 09
0
0
<Guest>
need hlp
2010 05 11
0
0
<Guest>
Alright, as I said before, I'm posting back one week after system restore. It's worked well so far, no problems since last week.
2010 05 15
0
0
<Guest>
if so many people knows da truth about this scam why wont the internet police ban it... and isnt that scam illegal... when i find out who made antivirus soft imma kick his nerdy face with my gangsta friends... -.-
2010 05 25
0
0
<Guest>
If you switch to another user, press ctrl+alt+delete, then click on the proccess tab, and try to disable it it will not work, however you can overide the internet portion of the virus, by typing an "s" sfter the http
2010 05 24
0
0
<Guest>
Alright, so It won't let me run it in safe mode, and tells me to put it back into normal mode and so I did. It still won't run because the virus has blocked it. Help Please!
2010 05 24
0
0
<Guest>
Can't thank this page enough!! I almost succumbed to purchasing the full version til a little doubt set in and made me google 'antivirus soft'. Heaps of thanks go out to this page, and pages similar, that combat malware etc. THANK YOU!!!!!!!!!!!!!!!!
2010 05 25
0
0
<Guest>
Wait, do you have to pay for the thingy you download?
2010 06 01
0
0
<Guest>
It killed my hard drive. I got the bsod and I can't do anything now. I've had to order a new hard drive and I'll have to pay someone to try and recover files. How is this legal?
2010 06 02
0
0
...
it keep living.. even how many i delete this...
2010 06 01
0
0
<Guest>
Ok, ive tried removing it several times and remain unsuccessful. What are my other options? I've run a full scan which took 2 1/2 hours and its still popping up. Please help.
2010 08 24
0
0
drexlerf
THANK YOU SO MUCH!!!
Stupid antivirus soft, ruining my computer
anyways.. why did they make viruses in the first place??
2010 11 18
0
0
<Guest>
Killed my hard drive too. Be careful with torrents!
2010 12 22
0
0
Ed
Found it in Windows 7 in temp under the user directory. dqmwxluxsik.exe
2011 04 18
0
0
Ben
The instructions on this website really work. Thanks you so much!
2011 08 05

Post Comment:

Attention: Use this form only if you have additional information about Antivirus Soft parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Related news:
Similar parasites:
Related articles:
Related discussions:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove Antivirus Soft using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other
Latest Spyware Threats: Internet Security 2012 | Win 7 Total security 2012 | System Check | Win 7 Internet Security 2012 | Win 7 Home Security 2012 | Win 7 Antivirus 2012 | Win 7 Antispyware 2012 | Vista Security 2012 | Vista Antivirus 2012 | Vista Antispyware 2012 | XP Antispyware 2012 | XP Antivirus 2012 | XP Security 2012 | XP Home Security 2012 | Security Shield
Agreement of Use | Privacy policy | Webmasters | Contact us | RSS Feeds
© 2001-2011 2-spyware.com All Rights Reserved. Reproduction in part or whole without written permission is prohibited. Powered by: eSolutions.