How to remove Antivirus Soft rogue anti-spyware

Malware Description:
Antivirus Soft (aka AntivirusSoft or Antispyware Soft) is new obnoxious rogue anti-spyware replacing one of the nastiest scareware applications of the last couple of months called Antivirus Live. The upgraded version (Antivirus Soft or Antispyware Soft) is actively exploiting blackhat social engineering and a variety of trojan-empowered techniques in order to facilitate the infiltration of its malcode into targeted workstations and PC networks. By the way, in case you got attacked by the program named Antispyware Soft, be aware that it’s a successor of the rogueware in question. Antispyware Soft is exploiting the same processes, and the removal tips below apply for it as well. Antivirus Soft fake spyware remover is being headquartered at Newsoftspot.com which is often a browser hijack destination spot. Since the very moment Antivirus Soft integrates its freeware into your Operating System, it tends to badly affect Windows Registry and the files configuration. Therefore it’s hard to prevent the executables of Antivirus Soft from running. When completely embedded into your OS and active, makes the PC use unbearable. It redirects your browser to blacklisted Internet sources and porn sites. Antivirus Soft will also be sure to trigger a variety of fake ads such as infiltration alerts, scanners and bogus Windows interfaces. With the help of these counterfeit warning messages, Antivirus Soft wants to push you into buying its licensed copy. Antivirus Soft will keep telling you that in order to remove the purportedly found parasites you need to activate its full version. That is very untrue though. Antivirus Soft can only lie to people and do lots of brainwashing without actually detecting malware or helping you whatsoever. If you linger and do nothing about Antivirus Soft infection it may progress and make things even worse. PC crashes, system freezes, more browser redirects and many other unwanted things – all the above are symptoms of Antivirus Soft activity if it remains unattended for a while. In case Antivirus Soft attacked your cyber environment, you should take the only right decision and remove it before it’s too late. Antivirus Soft removal instructions are provided below – please check them out and follow them step by step.
Significant Note:
We have been receiving a lot of feedback about the fact that Antivirus Soft prevents people from executing files and does not permit Internet access. In this context, please let us provide some tips and tricks to bypass this. The essential thing in terms of Antivirus Soft rogue anti-spyware’s functioning is that it takes about 10-15 seconds for this scam to load after system reboot. So you need to be really quick when doing the following:
1. Restart your PC;
2. As soon as Windows loads, be fast and click ‘Start’ in the left-hand bottom part of your desktop;
3. Click ‘Run’ and type in ‘msconfig’ (without quotes);
4. In the popup window that opens up, hit ‘Startup’ tab and locate the process that ends in ‘tssd’. Untick this process immediately;
5. Click ‘Apply’ and ‘Ok’;
6. Reboot your computer.
Now that you have restarted your PC, Antivirus Soft will not load. BUT it’s not gone yet. It’s still on your computer so you need to remove all of its files. So please visit our website and follow our instructions listed below.
In case you can’t surf the Internet, open Internet Explorer, go to ‘Tools’, choose ‘Internet options’ and hit ‘Connections’ tab. Click ‘LAN settings’ and untick the following option ‘Use a proxy server for your LAN’. Save all these changes. Now, you will be able to go to our website and download our removal tool to have Antivirus Soft virus expelled for good. Good luck everyone!

Malware Type: Rogue Anti-Spyware

Malware Author: Antivirus Soft, Inc.

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Antivirus Soft Free Scanner and Remover: Download Now

Antispyware Soft Screenshot:

Antispyware Soft

How to remove Antivirus Soft manually:
Manual removal of Antivirus Soft is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sftav.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“

Please, be aware that manual removal of Antivirus Soft is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Antivirus Soft, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Antivirus Soft Automatic Remover

Like This Article? Let Others Know!

Reader's Comments:

  1. admin |

    Dear visitors of our blog

    We have been getting some feedback about Antivirus Soft blocking Internet access so people can hardly surf the web for some help removing this virus. In this context, you might want to try the following instructions to get your Internet Explorer back to work:
    1. Open Internet Explorer, select ‘Tools’, then click ‘Internet Options’.
    2. Push the ‘Connections’ tab.
    3. Click ‘LAN settings’ option.
    4. Within the ‘LAN settings’ interface that just opened, uncheck the following option: ‘Use a proxy server for your LAN’.
    5. Click ‘OK’, after that ‘Apply’ and ‘OK’ once more.

    Now that you have done this, you will be able to use your browser again. Download the removal tool above and run it.

    BE SURE TO BOOT INTO SAFE MODE BEFORE FOLLOWING OUR INSTRUCTIONS. Safe Mode can be entered by pressing F8 key many times right before your Windows loads.
    Additional advice: you should keep trying to open up the Task Manager (Ctrl+Alt+Del) and if you do succeed, locate and end the process that ends in ‘sysguard.exe’. Doing this should paralyze the virus for a while for you to be able to follow our tips.

    Best of luck to all of you trying to rid yourselves of Antivirus Soft malware!

  2. daniel |

    hey.. apon starting my computer i am able to open the task manager briefly… but the file you ask me to terminate execution is not listed…(sysguard.exe) it does not appear. Can you help me

  3. Robert Higginbotham |

    I have had some success in doing the following.

    The newest version keeps any malware tools from working and even resets IE LAN settings back
    after you change them.

    I have been able to launch Mozzila in safe mode.

  4. Robert Higginbotham |

    I was able to finally remove the Scareware.

  5. admin |

    Daniel
    Antivirus Soft is using another process name, it’s [random]sftav.exe.
    Try to find and stop this one.

  6. Harry |

    worked like a breeze to resolve severly infected system where Antivirus Soft prevented any program/browser to run. Many Thanks.

  7. riken |

    worked great! saved a few hours for me! Thanks a lot!

  8. Filip |

    This is an nasty one! Got away with it thanks to these tips. Many thanks.

  9. Javier |

    I could not find the process in the startup tab. They must have changed the name from “sftav” to another thing, any ideas?

  10. admin |

    Javier,
    Thanks for your comment!
    You are right, this malware version is running the [random]tssd.exe process, so you should untick the item ending in ‘tssd’ under Startup Tab in Msconfig window.
    We have updated our guide above.
    Kind Regards,
    Admin

  11. Manu Parashar |

    A new name for there exe –
    domeececk/jqhnceatssd.exe

    They are changing names very quickly ,,, thanks for ur help guys !!

  12. edu |

    thank you so much. you guys are awesome. keep fighting those cowards.

  13. Reed |

    Finally got in and turned it off by being quick to get to the startup programs. Thank you for the advice. Terrible spyware program!

  14. KB |

    Just got nailed this morning. I had to load Spyware Doctor from another computer to a jump drive and run it in safe mode on the infected computer. I am now running a full scan in regular mode and have found 4 more infections. You saved me a lot of time and trouble.

    Many Thanks,

  15. TCJester2 |

    Thank you! I haven’t encountered something this bad in a long time. That “msconfig” trick did the job and gave me back control over my computer. Thanks again.

  16. Jacy |

    It is now called yvbblphntssd.exe I have able to not have it start so now on to the next step to remove it

  17. Laurie |

    Thanks so much for the help. This one was pernicious. Too bad the perverts behind it couldn’t find constructive work to do.

  18. Rich |

    holy crap…that was nasty…thanks for the tip…finally worked…you guys are truly wonderful…

  19. jack |

    Frankly, I am really impressed with the quality of the removal instructions.

    Thanks.

  20. Ben |

    Looks like it worked!

  21. Kenny |

    Haha, thanks!! I had a HUUGE project to do… such a convenient time for a virus like this to come up.

  22. ron |

    just got it and new name eovlstotssd.exe

  23. melanie |

    I just had to deal with this stupid virus. I followed these instructions run msconfig and go to startup. The file was named something else but did end in tssd just uncheck anything that looks suspicious though and quickly press apply and restart. After that it didn’t pop up and i was able to turn off the proxy and run a malware program to remove all the existing files.

  24. Jeffrey |

    Man I hate the fake anti-virus viruses. I remember not to long ago there was another bad one coming up in emails. You guys worked wonders. Thank you for getting me through these so easily.

  25. Mike |

    thank you very much this was very helpfull and saved me a lot of stress

  26. Diego |

    Another alias… unvxmsptssd.exe

  27. niki |

    I followed these instructions & successfully removed the nasty spyware from my computer. It took me 3 hrs. though cause I had too many programs that auto start when I log onto my computer. Thanks for this website!

  28. JR |

    Damn… this SOB virus screeched my pc to a holt. The tricks/solution listed ere were a godsend. MANY THANKS

  29. Jim |

    Thanks for these easy-to-follow instructions. This site may come in handy later too. *Adds to favorites*

  30. Chiigy |

    Great Guide and finally fixed my PC that’s been severely infected
    Only found a way to fix it with my laptop today and solved it
    Extra note, since it has penetrated and been embedded in my PC,
    I couldn’t find and no longer shows the “tssd.exe” while using the run>msconfig>start up

    Main Clue is if it’s Manufacturer is “Unknown”, that’s the virus

  31. Reymar |

    wow i just format my uncle computer for this and it jump on mine but i was save by u guys thank you so much i did not have to format my computer

  32. Annie |

    I had 2 different ones ending in tssd. Had to uncheck them both….

  33. crackgerbal |

    Hey there,

    wanted to say thanks for posting this. A friend of mine got this on their work computer and we were able to remove it using both spyware doctor and checking the registry keys manually.

    Thanks for the great instruction on this one.

  34. Trudi |

    Thanks for the simple, clear instructions. Even a non-tech like me could sort it out. Merci!

  35. drizz |

    works great thks

  36. Beth |

    Thanks so much.. this is a real help to pc dummies like me.. glad you guys are on our side.

  37. Deb |

    MY HEROES!!!! My autistic son went ballistic when the virus hit his computer – “YES, COMPUTER! YES, COMPUTER!” was all he yelled for the 20 minutes it took for me to find your site and fix it. You guys are a gift from God for me and my sanity. Thank You!

  38. Joe |

    Thank you for the great help you guys are doing. Amazing stuff!!!! Keep it up!

  39. Moose |

    Thank you SO MUCH! What I thought was going to be a long and lengthy process was turned into a simple speed attack of the problem. Thank you so very much.

  40. paulam |

    It is also called as vtpafqktssd.exe

  41. D |

    I noticed when cleaning a client’s computer that the [random] part of the [random]tssd.exe file is listed under msconfig’s start tab. I didn’t have a tssd.exe listed under Services. You may want to uncheck this also.

  42. Windknot_Flies |

    After the msconfig, I located a bunch of “unknown” manufacterers and disabled them. I restarted the computer and so far everything is working normally. I’m not a ‘computer person’ so I don’t know how to completely remove those programs from the system. I’m going to run the download now and see if that knocks it out. So far so good. Great tips and instructions here guys. Thanks!

    H
    Corpus Christi, TX

  43. E. |

    Hi,

    just wanted to thank you, got the bloody thing and it was driving me mad, but thanks to your instructions an hour later problem solved :)

  44. gilles |

    I can see other did it before me but I feel compelled to say it: THANK YOU. Your description is absolutely perfect, I am a computer dummy as well and understood perfectly.
    For others, note that I had one ending in tssd, and another one without name until it fully launched (named tssd afterwards).

  45. mzm |

    I got one was njueceyiu/beabopatssd.exe. Thaks for the tips!!

  46. reh |

    Had one called qdiscffg. thanks for the help ALOT

  47. Joshua |

    Many thanks, this is an awful scareware programme glad i got off lightly

  48. Veronica |

    Thanks so much! This stupid virus got me so frustrated I was ready to smash my laptop until I stumbled onto this page. Thanks so much! It worked like a charm.

  49. Gothminion |

    I found that it will be some rubbish process and the description will have a random selection of about 6-7 letters. Mine is something like fgbydtr or something. To get to task manager, I suggest that as soon as possible, do CTRL+ALT+DELETE and open task manager, and end the process as soon as possible. I keep task manager open Just In Case

  50. Jenny |

    OMG!!! My hero! =D I have never had a virus before. This worked perfectly! Great instructiosn and accuracy!! Sooooo happy! You are truely a life saver! Thank you! Thank you! Thank you! And did I mention…. Thank you!

  51. ak |

    thanks..i had to do the process twice but it seems to be fine for now.

  52. SD |

    Thanks. This seems to have worked fine. The file I had was “liwfvktssd.exe”

  53. That guy |

    Got hit by Antispyware Soft around 10am today. For the past few months this computer is just slow and old… takes me 10 minutes to open a new Internet Tab or window, but I eventually got rid of it after 2 1/2 hours of trying thanks to this places help… im gonna make sure to come back if it or something else hits me again…. and run alot more virus scans

  54. MD |

    I got rid of it, but still can’t use Internet Explorer, and even Steam is messed up. Any advice you can give would be appreciated.

  55. MrMyke |

    This little #$*%@^%* was nasty. It disabled my anti-malware, my search ability along with almost all internet and download function via IExplorer (firefox still worked), and disabled all .exe programs, except what it wanted to run. And it wanted to run popups…popups to sell its own cure, of course, but also plenty of porn pages as it loaded my IExplorer browser at will.

    BUT, these steps fixed it. I could go into Safe mode and did quickly open MSCONFIG, and found the bad startup file. Killed it. Then opened again and indeed it did not start. Ran anti-malware removal, which found rootkit, trojan and other bad registry entries. Even after that, though, I looked for the files named in this article, and found several, along with a couple of the listed registry entries, and removed those manually.

    Now, finally, thanks the the GREAT SERVICES of this site, my machine is clean!

    Thank you, thank you, thank you!!! What a fabulous service you all perform here!!!!!!!

  56. Ken |

    mine’s alias was ytirepmtssd

  57. Rainie |

    My computer doesn’t have the “start” in the beginning!
    But I found “run” on my normal taskbar and did it, but the antivirus soft just exit it out right away!

    I’m really scared and the pop-ups are digusting and annoying!

  58. Blucola |

    Thanks, I was able to successfully remove the program.

  59. Izzy |

    Thank GOD this worked! I don’t have a computer of my own; I use my sister’s. When it out of the blue got this virus, I completely flipped! If she had seen it like this, I’d be dead meat. Thank you sosososo much for putting this up! It worked amazingly.

  60. Oniel |

    you guys or gals are awesome!

  61. Gaarachee |

    Oh, thankyou so much. ;DD I got this virus, and had a full on panic attack. Luckily, I managed to find these instructions on my grandmother’s computer.

    By the way, on the Start menu, there were many different names for the program. They were pretty much all random lettering, and none of them ended with ‘tssd’. I’d say to anyone who gets this virus in the future to just click off all the ones with Unknown as the Publisher.

    Once again, thankyou so much!

  62. Scott |

    Thanks for the workaround/instructional. Stupid thing hit me a few mins ago. To bad the folks that do this crap didn’t put there talents to better things.

  63. Mandy |

    This is ridiculous! This virus is awful, it hit my computer when I was updating my facebook at 1 am, it is now 2:50 am and I am still working to get rid of it! But I am installing the spyware doctor now. Seems like this page is the most helpful one I have found. Thanks everyone.

  64. alvin |

    my memory stick was attached to the infected computer, you think it got infected too?

  65. ADuve |

    I’m an IT admin and I even got hit with this one. I couldn’t believe how deep this virus took hold of my computer! I had no control, I couldn’t run anything. thanks for the tips, it felt good to forcibly rip out this garbage from my computer and give a big middle finger to these con artists

  66. Joe |

    Thanks, trying the removal now.. its so frustrating

  67. MoMo |

    Here’s two more for folks to be looking for

    gcwdsbntssd

    batccvhtssd

    Thanks for the instructions and tips.

  68. Carl Nehm |

    Thanks for posting the information. I was able to stop the pop ups and do what I needed

  69. Dre |

    Thank you so much for the easy instructions on how to stop this aggressive virus. I just got hit this afternoon and was started to think I lost my laptop. I was able to stop it in ‘msconfig’ and it worked. Thanks guys for the tip!

  70. yeh |

    you guys are the realest at this stuff, keep up the goood work

  71. admin |

    MD
    Have you tried the LAN settings changing trick?
    It’s described at the bottom part of our removal description above.
    This should help resolve the IE problems.
    Thanks

  72. Bevan |

    What a nasty little critter! I did all the above, especially starting msconfig immediately and removing those files. But, the thing that did it was to start in Safe Mode, install the software from there, and then the trick is to click IMMEDIATELY on the icon for Spyware Doctor before your system loads completely after a restart in normal mode. Then, you must download all the updates, even while you are still getting these annoying boxes opening up. It took all morning but I got that little s.o.b. Thanks for all the tips.

  73. Juliet |

    I was not able to find any of the exe files mentioned here.

    So i did a search for all the exe files created on the day my PC got infected. I got

    syssvc.exe
    iimnsl.exe
    iBNRc.exe

    i deleted all three.

    Then i did a search for *.* files created on that day

    i deleted all data in prefetch folder and temp folder as it contained lots of suspicious files.

    After this, i did all the registry deletes mentioned.

    I couldnt find any specific suspicious file in start up.

    after all this, i rebooted, now PC seems fine so far.

  74. BobbyLy |

    Just a heads up. The name of the infected files changes. Not always .tssd or .avle or whatever they may be. I know the date and time that the virus hit me, so i went through every folder and organized by date, then was able to find the bad folder. They have lots of different names, and apparently whoever is doing it has time to change the names daily. Opening task manager AS SOON as your computer boots, then clicking on “antispyware soft” when it opens, and ending task should be a temporary fix. Although the files remain on your system, you will be able to use it like usual. Ctrl+ALT+DEL opens task manager FYI :)
    Hope this helps, its a bummer, but stay patient. You will get your computer back!

  75. aiv |

    usually i dont get these but when i do it causes hours of work trying to get it off . Now i will tell you i got mine from piratebay. Which has been under attack frequently by trojans and such.So this came as no surprise to me to see.Beware if or dloading alot lol make sure u do it from a site that is respectable in the community.

  76. Aaron116 |

    now look for kmandyjtssd.exe

  77. ming |

    Thank you for the instruction and thank you every body for your contribution. You have helped me removing this nasty virus from my daughter’s laptop.

  78. Viking |

    i got the name as sddblqilanw

    Got from Thepiratebay.com

  79. Happy Camper |

    Followed the instructions and my system is now clean.

    Thank you…

Post a Comment: