Antivir Solution Pro

Amen to the backup registry first. Great tips and solid info.

im scare he gonna blame it on me that i mess it up the desktop and i didn't do nothing wrong cause im the only 1 using the computer for this week please i need your help how to take it out from is pc contact me my email Removed for Privacy and im only 13 years old please i need your help.........................god bless u

AVSolution is bad. Remove it.

Did you remove the proxy settings like we showed you in the video?

AVG offers zero protection to your computer and you will get infected again. At least the free revision offers no protection. Run a full scan as we stated in the guide with Spyware Doctor with Antivirus. It's free to scan and will tell you if you have any other infections on the computer.

Big Thanks for rating us on WOT. We need the help there because people say false things with out even looking at our site.

Glad you were able to follow the guide and fully remove the virus yourself.

Agree! I didn't get my solution from this site, but was just browsing to see if anyone had gone the Best Buy route. I had the issue last weekend and panicked like most do when they get something like that unless they are already pretty techy. I knew enough about computers to play around it, but first called Best Buy. The lovely Geek Squad stressed this was the worse virus ever (which I doubt since many seem to be able to remove on their own), but they could fix for a cool $199. AND...would take 2-4 days.

Capitilism at its best...seeing how I fixed on my own in an hour (most of that time was researching on the internet) and I fixed by restoring the computer back to a pre-virus date. Cost me $0. I have never been a big fan of Best Buy, but I will limit my shopping their even more since they are "in" with these folks apparently and not telling customers the truth.

AVG is not going to cut it.

Boot into safe mode with networking. Download Spyware Doctor with antivirus as the guide states and run a full scan there. Ensure you update the client first. In safe mode the threat should not be running. You have a secondary infection "Root Kit" that is most likely re-installing the program. No way to know what the trojan is with out running a full scan. SDA does cost money to remove threats. However the free trial will still scan and block threats. From there you can see what files you need to delete.

Did you ever run a scan using Spyware Doctor with Antivirus? This is the first thing I tell everyone who has issues locating the virus threat. The SDA client will show you exactly were the files are located when you run a FULL scan. From there you can manually delete them. The free trial will NOT remove threats but it's awesome at stopping the threat from getting worse and will show you the exact folder locations of the viruses so you can then browse down to them and manually delete them. You may need to be in safe mode to delete the viruses.

Did you run the FULL scan with Spyware Doctor with Antivirus? That is the first step to see what you are infected with. From there the answer will very.

It sounds like you have a BHO that is causing the issue. Re-setting IR normally resolves this issue. Run the scan and report back the results

You can run the client in Safe mode with Networking. Be sure to update the client first. In safe mode it will run. Other wise the virus is blocking it. If you wish to run the client in normal mode you need to follow the manual guide first and stop this process from running

Reset IE. We have the tool in the side bar to do it.

Hi Debbie,

While there are programs out there that steal user data this virus alone does not do that. Unless you actually pay for the thing anyways.

To be sure I recommend running a full scan with Spyware Doctor with Antivirus. The nice thing with the free scan is you can dive into the threats and read what PCTools has to say about the threat. In most cases it will not steal personal information.

I would still keep a close eye on your bank account if you use a debit card. The safer practice is to never use a Debit card online. Only use a credit card or better yet Paypal. It's safer because going that route you can get your money back. Using a debit card the bank will just shrug their shoulders and say we can get you a new card but that is it.

The problem with registry keys is you may actauly want that value on for some other software program you may have. However that is unlikely. This registry key basically means "Allow software to run or install even if the signature is invalid". This is a big no no in most cases. By changing the "1" to "0" we basically turn this value off.

This can be SUPER confusing for most people. It is also dangerous for people who do not know what they are doing to poke around in the registry. We are very hesitant to actually straight out tell people what they should change the value to because we can not be held liable for any damages. However this is a great question and I'm surprised more people do not ask it.

What is the folder name and location?
What files are in the folder?
Did you run a full scan using Spyware Doctor with Atnivirus. If you are having troubles downloading the client or installing it you will want to go into safe mode with networking and install it there. Be sure to run the FULL scan. This will tell you the exact file name that you need to manually delete.

With out knowing the above we really can't help much.

Glad to see you got rid of the virus. Or at least it seems that way. What I would do is boot into safe mode with networking and download Malwarebytes and run a scan with that just to ensure everything is gone. If it picks something else up then great. It may not because like you said your purchased the SDA client and everything seems to be good except your computer is really slow.

If the above does not work I would uninstall the SDA client and reboot. See if your computer runs faster with out the client installed. If you notice a huge difference in speed it means you most likely have little computer memory to handle a good solid internet security product. I would still re-install the client again but perhaps leave out things like the browser defender and see if that does not help pickup more speed.

I recommend no less then 2G's of ram. 4 Gig's is the recommended amount of memory. You can see how much memory is installed on your computer under the properties tab of the Computer or MY Computer Icon. If it's less then 2g's I would Google memory configuration and look up your model to see what type of memory your computer can use and what the cost is.

If your computer is very old and lets say it only has 512MB of memory then running any security client that is up to date for 2010 will cause a BIG decrease in system performance.

Let us know if you find the root cause. I'm interested.

The answer to your question is already in the guide. Read it again and follow the proxy removal vid.

If you want to learn how to remove or edit registry keys you can go under the how to guides section and read that article.

You do not have to re-name the file the the prefetch folder. I would still delete it but it really does not matter.

Here is what I would do because you already purchased the SDA client.

1. Ensure the product is fully up-todate
2. Run a FULL scan on my computer.
3. Download Malwarebytes, install, run full scan at the same time as the SDA scan. We are using a second client to ensure nothing is being left over by the first security client. SDA does a great job at blocking threats and removing them in the first place so you must have a rootkit on your computer that is re-installing this virus before the SDA client is up and running on boot. The above steps should solve this issue for you.

You may also want to take a look at the start-up Menu. Go to the run/AKA Search box. Type in MSCONFIG . Than select the Startup tab. Under there go through and look for any very wierdly named files. Pay close attention to Temp file locations and System32 locations. If there is something there that looks really off, chances are it's what is re-installing the threat. Un-check the box and see if that stops the threat. My guess is if the SDA client does not pick it up after a full scan you may have to wait a day or so for another update that will include whatever rootkit is installing this threat. PCTools also offer free support so you may just want to go that route as well.

As stated in the video the path for XP is %Documents and Settings%\[UserName]\Local Settings\Application Data\[random characters ]\[random characters]tssd.exe.

You do have a local Settings folder. Again as stated in the guide it is a hidden folder. Watch the video. You need to either un hide the folders or manually type in the LocalSettings path.

When it comes to registry keys and the potential to really screw things up on your computer We can not tell you what to delete and not to delete. Does this look like a false entry to me? Yes. Would I delete it? Yes. But before all of that I would of ran a full scan with Spyware Doctor with Antivirus to let it tell me if this was really a threat to remove or not.

In the end the choice is yours and your alone but if it was my computer I would delete that funky name because it just looks wrong.

Hey I found this link describing the same registry files you were talking about. I had the same ones and removed all the ones listed here. Hope this helps LINK REMOVED ( did not contain manual removal instructions )

Hard to answer the question with out knowing what OS you are using. Does it boot into normal mode? If so you can still follow the guide and remove the threat in normal mode. I have removed this threat about 30 times now and do it in normal mode almost every time. Try the guide and if you have a question on a specif step please ask.

As far as not being able to boot into safe mode your computer may be missing some core OS files. You can always use the backup computer disc to do a soft system restore.