Saturday, July 24, 2010

How To Remove AV Security Suite

AV Security Suite is another rogue anti-spyware program from the same family of viruses that Antispyware Soft and Antivirus Soft belongs to.  These viruses download themselves to your computer through hacked websites or through spam in your email.  Once AV Security Suite has downloaded itself, it will install and run startup without your authorization.  It will then run a fake scan and notify you of numerous infections on your computer.  All these infections are fake and used to trick you into buying the program.

How to remove AV Security Suite

To remove AV Security Suite, you need to start by rebooting into Safe Mode with Networking.  When your computer first turns on, tap the F8 key repeatedly and select Safe Mode with Networking.

The virus has also changed your internet connection to use a proxy server and AV Security Suite is set to be your proxy server.  It will not allow you to download the tools you need to remove the virus.  To fix this, open up Internet Explorer and go to the Tools menu and open up Internet Options.  Next, click on the Connections tab and open LAN Settings.  Under the Proxy Server Section, untick the box labeled, Use a proxy server for your LAN.

Now you need to download Malwarebytes AntiMalware and install the program.  Make sure Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are both ticked.  When the program launches and the update is complete, make sure Perform full scan is selected and click Scan.  When the scan completes, click Show Results and then click on Remove Selected to remove all of the malware found in the scan.

If you need assistance removing this or any other virus, please feel free to contact our online virus removal team.

AV Security Suite Manual Removal

NOTE: Removing the AV Security Suite virus manually may permanently damage your computer if a mistake is made during the removal process. We suggest you only try this method if you are comfortable inside your system registry. If not, try one of the methods listed above.

Stop these AV Security Suite processes:
[RANDOM CHARACTERS].exe
[RANDOM CHARACTERS]tssd.exe

Remove these AV Security Suite files:
%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\[RANDOM CHARACTERS]tssd.exe

Remove these AV Security Suite Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"[EIGHT RANDOM CHARACTERS]" = "%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\[RANDOM CHARACTERS]tssd.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"[HARACTERS]" = "%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS]\[SECOND SET OF RANDOM CHARACTERS]tssd.exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\"CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\"RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter\"EnabledV8" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter\"Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments"SaveZoneInformation" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations\"LowRiskFileTypes" = ".exe"
HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE
HKEY_LOCAL_MACHINE\SOFTWARE\avSofT
HKEY_CURRENT_USER\Software\avSofT

Wednesday, May 26, 2010

How To Remove Antispyware Soft

Antispyware Soft is one of many rogue anti-spyware programs that downloads itself onto the users computer and runs every time the computer is started. It will launch fake Windows Security alerts and will run a fake scan and alert the user of numerous infections that aren't really there. Then it will give the user an option to buy the full version of the product so that they can eliminate any "infections". Paying for the full version does nothing but support the authors of the virus.

How to remove Antispyware Soft

This virus often blocks the execution of programs. To get around this, reboot and press F8 to enter safe mode with networking. It also may change your internet connection settings. To fix this, open up Internet Explorer, then go to the 'Tools' menu and select 'Internet Options'. Next go to the 'Connections' tab and click on 'LAN Settings'. Untick the box under 'Proxy server'.

Now that your in safe mode and your internet connection is working again, download and install Malwarebytes AntiMalware. If the setup file will not run, rename it to iexplore.exe. After installation, update the program and perform a full scan.

Due to the design of this virus, it may make it very difficult for you to install security software. If you need assistance, we suggest letting our online virus removal team help you out.

Antispyware Soft Manual Removal

NOTE: Removing the Antispyware Soft virus manually may permanently damage your computer if a mistake is made during the removal process. We suggest you only try this method if you are comforatable inside your system registry. If not, try one of the methods listed above.

Stop these Antispyware Soft processes:
[random string]tssd.exe

Find and delete these Antispyware Soft files:
%UserProfile%\Local Settings\Application Data\\tssd.exe

Remove these Antispyware Soft registry values:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
HKEY_CURRENT_USER\Software\avsoft
HKEY_CURRENT_USER\Software\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_CURRENT_USER\Software\Microsoft\Internet Explore\Download "RunInvalidSignatures" ="1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"

Bookmark and Share