Virus RemovalIf You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Computer Repair site or check out www.pcninja.com for live help.

Antivirus Soft

Info: Antivirus Soft is a variant of the notorious fake anti-spyware known as Antivirus Live. Just like its predecessor, Antivirus Soft uses scare tactics to try and get users to purchase a software license. Antivirus Soft gets installed via Trojans that exploit security loopholes in the system or via porn websites. Once installed, it enters a number of registry keys in to the Windows Registry, as well as creating a number of harmless files on the hard disk. Then Antivirus Soft performs a series of fake virus scans, coming up with false results that state that the previously created files are dangerous viruses. This rogue software also claims that the currently installed ‘trial’ version cannot remove these false threats, and urges the user to purchase a license to the ‘full’ version of Antivirus Soft. However, as Antivirus Soft is a fake program none of its versions can scan or clean any system, therefore no user should allow themselves to be tricked into paying for Antivirus Soft.

Antivirus Soft

Antivirus Soft

» Download Antivirus Soft Removal Software ( AKA Spyware Doctor with Antivirus )

As soon as you find a copy of Antivirus Soft on your computer, you should take steps to remove it. In order to remove Antivirus Soft, you must stop its processes, delete its files and folders and remove its registry entries.

Automatic Removal

If you are looking for an automatic solution we recommend Spyware Doctor with Antivirus.  You may need to follow the guide bellow to first stop this false software program and then install the client.  Be sure to use coupon code "removevirus10" for a great discount.  Just remove the quotes.

Expert Help

Some times you just need an expert.  If nothing is working for you then we recommend www.pcninja.com.  This is one of the worlds leading remote computer repair companies and they totally rock.

Antivirus Soft Removal Video

Antivirus Soft Removal

Antivirus Soft File Removal Instructions

The first step you must take in order to remove Antivirus Soft is to stop the following processes: ( Learn how to terminate a running process )

  • [random characters]sysguard.exe
  • [random characters]sftav.exe

Claim Your Free Scan of Spyware Doctor with Antivirus

The next step is to delete the following files and folders:

Windows XP:

  • %UserProfile%Local SettingsApplication Data[random characters]
  • %UserProfile%Local SettingsApplication Data[random characters][random characters]sysguard.exe  ( PLease note that this last section wil change over time )
  • %UserProfile%Local SettingsApplication Data[random characters][random characters]sftav.exe

Windows 7 | Windows Vista:

  • %UserProfile%AppDataLocal[random characters]
  • %UserProfile%AppDataLocal[random characters][random characters]sysguard.exe
  • %UserProfile%AppDataLocal[random characters][random characters]sftav.exe

Once these steps have been completed, Antivirus Soft no longer resides on your hard disk.

Antivirus Soft Registry Removal Instructions

File removal alone is not enough to completely remove Antivirus Soft. The following registry keys and settings should also be deleted: (How to Edit Registry Here)

  • HKEY_LOCAL_MACHINESOFTWAREavsoft
  • HKEY_CURRENT_USERSoftwareavsoft
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random charaters]" ( IN OUR CASE THIS WAS lwxicfyh )
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "[random characters]" ( IN OUR CASE THIS WAS lwxicfyh )
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation" = "1"
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyServer" = "http=127.0.0.1:5555"
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = ".exe"
  • HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "ProxyOverride" = ""

Now it is safe to say that you have completely gotten rid of Antivirus Soft. However, in order to be certain of this fact and that no additional malware is left on the system it is recommended to conduct a full system scan using legitimate software such as Spyware Doctor with Antivirus.

Conclusion

Inexperienced users are advised against attempting to manually remove Antivirus Soft, as any mistake made during removal could result in the system being damaged. The best way for inexperienced users to ensure that Antivirus Soft is removed completely and safely is to use a web-based repair service such as www.pcninja.com.

Other Software clients that Removevirus.org likes to use

  • Spyware Doctor with Antivirus
  • Norton
  • Trend Micro
  • Kaspersky
  • AVG
  • MalwareBytes

As always please post updates to the file traces. If yours are different then other users will find it helpful.

VN:F [1.9.10_1130]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.10_1130]
Rating: 0 (from 0 votes)
  • Anonymous

    Thanks so much for all the info on Antivirus Soft! This is a really helpful website!

    Question: I only found and deleted the “…sftav” file from my computer, as I couldn’t find the “…sysguard.exe” file. Is there still definitely a file on my computer by the name of “…sysguard.exe”?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    No you may not have the file sysguard.exe on your computer. These rogue security clients mutate and change all the time.

    I would simply recommend you run a full scan using what ever security client you like best to ensure you have nothing else on your computer. Make sure your client is updated with the latest updates as well.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    You very well may not have any of the above items in the registry or they may of changed. Best thing is to run a few scan using whatever security software you like the most. This is needed anyways to ensure you do not have any trojans and the like on your computer.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I am running xp pro. I have tried to remove registry files for antivirus soft but alot do not appear to be on registry entries under the (regedit). I have printed the removal instructions from a different computer. Would they be different for xp pro?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I downloaded the software and deleted files but when I go to open the Spyware Doctor it says it has been infected.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Ensure the security client is up to date. Also go under the settings and check the box that says “scan for hidden root kits” Run a full scan. You may also want to run a full scan while in safe mode.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    appreciate the info. Removal worked great. Thx again.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Did you run an antivirus scan? If not then that is your first step. Most likely you have other trojans installed and that is why we always recommend running a full virus scan using whatever your favorite security software is. We recommend Spyware Doctor with Antivirus.

    Other then that you may need to re-set IE and your Hosts file.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I went into safe mode and deleted Antivirus Soft (I think?) but now I can’t log into my yahoo account and IE doesn’t work as well. Any ideas?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    The computer that I am working with is from a business, this program Antivirus 7 showed up and started shutting programs and keeping legitimate Antivirus software from being downloaded. I used Revo Uninstaller to stop the processes but in scanning with malwarebytes the virus showed up, appearently Antivirus 7 was an .exe of the actual virus embedded. Now the virus will not let me even get to the windows interface when I boot up, after the intial login the computer goes to a fake scan screen that does not allow you to maneuver from that program. It disables the task manager and I cannot bypass the program. My thought is to put the hard drive on another computer and scan and edit the hardware that way. I am open for any suggestions, any encouragement or direction. Promptly if possible, I have been working on this all night.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    hi may u show me how to remove antivirus soft on the video for window vista

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    This guide was written specifically for that operating system. Read the guide! the answers are there and it works very well for most.

    If you have a specif question about a step then please let us know what you have already done in the guide and what you are having trouble with.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Found this site and rocked its ass!!! Thanks. Just some info for others with Windows 7. Tried to run Task Manager to shut down processes and it wouldn’t let me, however I was able to switch user to another account run Task Manager, choose show processes from all user and start shutting them down. Got on this webpage and rolled on son……

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Thanks for the kind words.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    The above processes in the guide will not be running while in safe mode. This is a good thing. you can simply browse to were the files are located and delete them.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    What if I can’t find any of those file names in my task manager. It’s in safe mode right now. Would it have another name, do I have to do it not in safe mode

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    did you try deleting it in Safe mode yet? That is the simplest thing to do first. it may not be deleting because it’s still running. In safe mode you would not have this issue.

    It may also be a permisions issues. Depending on your OS there are steps you can take to to over ownership.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Sam

    Hey,
    i cant delete the random character folder or anything inside it, it comes up with “You need permission to perform this action” unless im crazy i have full control of my computer…. you know other than the virus overlord.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.