Antivirus Soft

Bookmark and Share

Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. »Download

Online Virus Removal Guaranteed online virus removal service or you don't pay: www.OnlineComputerRepair.org

Info: Antivirus Soft is a variant of the notorious fake anti-spyware known as Antivirus Live. Just like its predecessor, Antivirus Soft uses scare tactics to try and get users to purchase a software license. Antivirus Soft gets installed via Trojans that exploit security loopholes in the system or via porn websites. Once installed, it enters a number of registry keys in to the Windows Registry, as well as creating a number of harmless files on the hard disk. Then Antivirus Soft performs a series of fake virus scans, coming up with false results that state that the previously created files are dangerous viruses. This rogue software also claims that the currently installed ‘trial’ version cannot remove these false threats, and urges the user to purchase a license to the ‘full’ version of Antivirus Soft. However, as Antivirus Soft is a fake program none of its versions can scan or clean any system, therefore no user should allow themselves to be tricked into paying for Antivirus Soft.

Antivirus Soft

Antivirus Soft

» Download Antivirus Soft Removal Software ( AKA Spyware Doctor with Antivirus )

As soon as you find a copy of Antivirus Soft on your computer, you should take steps to remove it. In order to remove Antivirus Soft, you must stop its processes, delete its files and folders and remove its registry entries

Automatic Removal

If you are looking for an automatic solution we recommend Spyware Doctor with Antivirus.  You may need to follow the guide bellow to first stop this false software program and then install the client.  Be sure to use coupon code "removevirus10" for a great discount.  Just remove the quotes.

Expert Help

Some times you just need an expert.  If nothing is working for you then we recommend www.onlinecomputerrepair.org.  This is one of the worlds leading remote computer repair companies and they totally rock.

Antivirus Soft Removal Video

Antivirus Soft Removal

Antivirus Soft File Removal Instructions

The first step you must take in order to remove Antivirus Soft is to stop the following processes: ( Learn how to terminate a running process )

  • [random characters]sysguard.exe
  • [random characters]sftav.exe

Claim Your Free Scan of Spyware Doctor with Antivirus

The next step is to delete the following files and folders:

Windows XP:

  • %UserProfile%\Local Settings\Application Data\[random characters]\
  • %UserProfile%\Local Settings\Application Data\[random characters]\[random characters]sysguard.exe  ( PLease note that this last section wil change over time )
  • %UserProfile%\Local Settings\Application Data\[random characters]\[random characters]sftav.exe

Windows 7 | Windows Vista:

  • %UserProfile%\AppData\Local\[random characters]\
  • %UserProfile%\AppData\Local\[random characters]\[random characters]sysguard.exe
  • %UserProfile%\AppData\Local\[random characters]\[random characters]sftav.exe

Once these steps have been completed, Antivirus Soft no longer resides on your hard disk.

Antivirus Soft Registry Removal Instructions

File removal alone is not enough to completely remove Antivirus Soft. The following registry keys and settings should also be deleted: (How to Edit Registry Here)

  • HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
  • HKEY_CURRENT_USER\Software\avsoft
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random charaters]" ( IN OUR CASE THIS WAS lwxicfyh )
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]" ( IN OUR CASE THIS WAS lwxicfyh )
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""

Now it is safe to say that you have completely gotten rid of Antivirus Soft. However, in order to be certain of this fact and that no additional malware is left on the system it is recommended to conduct a full system scan using legitimate software such as Spyware Doctor with Antivirus.

Conclusion

Inexperienced users are advised against attempting to manually remove Antivirus Soft, as any mistake made during removal could result in the system being damaged. The best way for inexperienced users to ensure that Antivirus Soft is removed completely and safely is to use a web-based repair service such as www.onlinecomputerrepair.org.

Other Software clients that Removevirus.org likes to use

As always please post updates to the file traces. If yours are different then other users will find it helpful.

Virus Removal

18 comments for "Antivirus Soft".

Anonymous's picture

1. Thanks!

Thanks so much for all the info on Antivirus Soft! This is a really helpful website!

Question: I only found and deleted the "...sftav" file from my computer, as I couldn't find the "...sysguard.exe" file. Is there still definitely a file on my computer by the name of "...sysguard.exe"?

technical admin's picture

2. No you may not have the file

No you may not have the file sysguard.exe on your computer. These rogue security clients mutate and change all the time.

I would simply recommend you run a full scan using what ever security client you like best to ensure you have nothing else on your computer. Make sure your client is updated with the latest updates as well.

Anonymous's picture

3. antivirus soft

I am running xp pro. I have tried to remove registry files for antivirus soft but alot do not appear to be on registry entries under the (regedit). I have printed the removal instructions from a different computer. Would they be different for xp pro?

technical admin's picture

4. You very well may not have

You very well may not have any of the above items in the registry or they may of changed. Best thing is to run a few scan using whatever security software you like the most. This is needed anyways to ensure you do not have any trojans and the like on your computer.

Anonymous's picture

5. I downloaded the software and

I downloaded the software and deleted files but when I go to open the Spyware Doctor it says it has been infected.

technical admin's picture

6. Ensure the security client is

Ensure the security client is up to date. Also go under the settings and check the box that says "scan for hidden root kits" Run a full scan. You may also want to run a full scan while in safe mode.

Anonymous's picture

7. Thank you

appreciate the info. Removal worked great. Thx again.

Anonymous's picture

8. Internet Explorer and Yahoo Messenger not working?

I went into safe mode and deleted Antivirus Soft (I think?) but now I can't log into my yahoo account and IE doesn't work as well. Any ideas?

technical admin's picture

9. Did you run an antivirus

Did you run an antivirus scan? If not then that is your first step. Most likely you have other trojans installed and that is why we always recommend running a full virus scan using whatever your favorite security software is. We recommend Spyware Doctor with Antivirus.

Other then that you may need to re-set IE and your Hosts file.

Anonymous's picture

10. Its Morphed into a Major problem

The computer that I am working with is from a business, this program Antivirus 7 showed up and started shutting programs and keeping legitimate Antivirus software from being downloaded. I used Revo Uninstaller to stop the processes but in scanning with malwarebytes the virus showed up, appearently Antivirus 7 was an .exe of the actual virus embedded. Now the virus will not let me even get to the windows interface when I boot up, after the intial login the computer goes to a fake scan screen that does not allow you to maneuver from that program. It disables the task manager and I cannot bypass the program. My thought is to put the hard drive on another computer and scan and edit the hardware that way. I am open for any suggestions, any encouragement or direction. Promptly if possible, I have been working on this all night.

Anonymous's picture

11. hi

hi may u show me how to remove antivirus soft on the video for window vista

technical admin's picture

12. This guide was written

This guide was written specifically for that operating system. Read the guide! the answers are there and it works very well for most.

If you have a specif question about a step then please let us know what you have already done in the guide and what you are having trouble with.

Anonymous's picture

13. You Rock

Found this site and rocked its ass!!! Thanks. Just some info for others with Windows 7. Tried to run Task Manager to shut down processes and it wouldn't let me, however I was able to switch user to another account run Task Manager, choose show processes from all user and start shutting them down. Got on this webpage and rolled on son......

technical admin's picture

14. Thanks for the kind words.

Thanks for the kind words.

Anonymous's picture

15. hi

What if I can't find any of those file names in my task manager. It's in safe mode right now. Would it have another name, do I have to do it not in safe mode

technical admin's picture

16. The above processes in the

The above processes in the guide will not be running while in safe mode. This is a good thing. you can simply browse to were the files are located and delete them.

Anonymous's picture

17. Hey, i cant delete the random

Hey,
i cant delete the random character folder or anything inside it, it comes up with "You need permission to perform this action" unless im crazy i have full control of my computer.... you know other than the virus overlord.

technical admin's picture

18. did you try deleting it in

did you try deleting it in Safe mode yet? That is the simplest thing to do first. it may not be deleting because it's still running. In safe mode you would not have this issue.

It may also be a permisions issues. Depending on your OS there are steps you can take to to over ownership.

Post new comment

The content of this field is kept private and will not be shown publicly. If you have a Gravatar account, used to display your avatar.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Enter the characters shown in the image.
Syndicate content