Antivirus Soft is a new bogus computer security tool that can alter system settings and Internet browser configuration such as default home page, proxy and LAN settings configuration. Antivirus Soft causes this changes to make Internet browser redirects to scam security websites and avoid its victims from visiting security related websites. Its presence will also create malfunctions on various Windows tools such as folder options, task manager and control panel to prevent Antivirus Soft manual removal on the infected system.
Surely, Antivirus Soft was created to scam users and let them have a paid version of the program before an affected computer can be returned to its normal state. However, security experts learned that even having the Antivirus Soft activation key or registration code won’t resolve issues it has already brought to the compromised computer.
What are the Symptoms of Antivirus Soft Infection?
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “Antivirus Soft”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run “Antivirus Soft”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “[random]”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run “[random]”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Attachments “SaveZoneInformation” = “1”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Internet Settings “ProxyServer” = “http=127.0.0.1:5555”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Associations “Files” = “.exe”
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
- HKEY_CURRENT_USER\Software\AvScan
The threat will drop the following malicious files:
- C:\Program Files\Antivirus Soft\
- %UserProfile%\Local Settings\Application Data\[random]\
- %UserProfile%\Local Settings\Application Data\[random]\[random]sysguard.exe
How to Remove Antivirus Soft Manually
1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.
How to Easily Remove Antivirus Soft
1. Download and run Removal Tool to remove Antivirus Soft
