How to remove Antivirus Soft rogue anti-spyware

Malware Description:
Antivirus Soft (aka AntivirusSoft) is new obnoxious rogue anti-spyware replacing one of the nastiest scareware applications of the last couple of months called Antivirus Live. The upgraded version (Antivirus Soft) is actively exploiting blackhat social engineering and a variety of trojan-empowered techniques in order to facilitate the infiltration of its malcode into targeted workstations and PC networks. Antivirus Soft fake spyware remover is being headquartered at Newsoftspot.com which is often a browser hijack destination spot. Since the very moment Antivirus Soft integrates its freeware into your Operating System, it tends to badly affect Windows Registry and the files configuration. Therefore it’s hard to prevent the executables of Antivirus Soft from running. When completely embedded into your OS and active, makes the PC use unbearable. It redirects your browser to blacklisted Internet sources and porn sites. Antivirus Soft will also be sure to trigger a variety of fake ads such as infiltration alerts, scanners and bogus Windows interfaces. With the help of these counterfeit warning messages, Antivirus Soft wants to push you into buying its licensed copy. Antivirus Soft will keep telling you that in order to remove the purportedly found parasites you need to activate its full version. That is very untrue though. Antivirus Soft can only lie to people and do lots of brainwashing without actually detecting malware or helping you whatsoever. If you linger and do nothing about Antivirus Soft infection it may progress and make things even worse. PC crashes, system freezes, more browser redirects and many other unwanted things – all the above are symptoms of Antivirus Soft activity if it remains unattended for a while. In case Antivirus Soft attacked your cyber environment, you should take the only right decision and remove it before it’s too late. Antivirus Soft removal instructions are provided below – please check them out and follow them step by step.

Malware Type: Rogue Anti-Spyware

Malware Author: Antivirus Soft, Inc.

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Antivirus Soft Free Scanner and Remover: Download Now

Antivirus Soft Screenshot:

Antivirus Soft

How to remove Antivirus Soft manually:
Manual removal of Antivirus Soft is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“

Please, be aware that manual removal of Antivirus Soft is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Antivirus Soft, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Antivirus Soft Automatic Remover

Reader's Comments

  1. admin |

    Dear visitors of our blog

    We have been getting some feedback about Antivirus Soft blocking Internet access so people can hardly surf the web for some help removing this virus. In this context, you might want to try the following instructions to get your Internet Explorer back to work:
    1. Open Internet Explorer, select ‘Tools’, then click ‘Internet Options’.
    2. Push the ‘Connections’ tab.
    3. Click ‘LAN settings’ option.
    4. Within the ‘LAN settings’ interface that just opened, uncheck the following option: ‘Use a proxy server for your LAN’.
    5. Click ‘OK’, after that ‘Apply’ and ‘OK’ once more.

    Now that you have done this, you will be able to use your browser again. Download the removal tool above and run it.

    BE SURE TO BOOT INTO SAFE MODE BEFORE FOLLOWING OUR INSTRUCTIONS. Safe Mode can be entered by pressing F8 key many times right before your Windows loads.
    Additional advice: you should keep trying to open up the Task Manager (Ctrl+Alt+Del) and if you do succeed, locate and end the process that ends in ’sysguard.exe’. Doing this should paralyze the virus for a while for you to be able to follow our tips.

    Best of luck to all of you trying to rid yourselves of Antivirus Soft malware!

  2. daniel |

    hey.. apon starting my computer i am able to open the task manager briefly… but the file you ask me to terminate execution is not listed…(sysguard.exe) it does not appear. Can you help me

  3. Robert Higginbotham |

    I have had some success in doing the following.

    The newest version keeps any malware tools from working and even resets IE LAN settings back
    after you change them.

    I have been able to launch Mozzila in safe mode.

  4. Robert Higginbotham |

    I was able to finally remove the Scareware.

  5. admin |

    Daniel
    Antivirus Soft is using another process name, it’s [random]sftav.exe.
    Try to find and stop this one.

Comment