Update:

---

Information:

The removal instructions of the new Spyware variant called Antivirus soft.

Antivirus Soft

• Antivirus soft is a rouge anti-spyware program from the same family as Antivirus live and Antivirus Pro.
• Antivirus Soft will also change the Proxy settings in Internet Explorer so that you cannot browse to any web site other than the site for Antivirus Soft so that you can purchase the program.

Removal instructions

The removal steps for Antivirus soft, Antivirus System PRO and Antivirus Live are same .The change is only in the main user interface window.

• Click on Start menu, select Run
• Type . and click on Ok. (You will get the current user profile folder.)
• Open the Folder Local settings/Application Data .(Need to enable the show hidden files and folders option)
• Check for a random folder having six characters.

• Drag the random folder which is recently modified to the desktop.(Check the contents of the folder. There should be a file like xxxsysguard.exe eg: ykjasysguard.exe)
• Restart computer.
• After reboot, remove the proxy connection settings created by the Spyware.

(Click Start-Run, type inetcpl.cpl , Open the Connection tab, click on LAN settings, Uncheck the Proxy server box.

Registry keys to delete:

HKEY_CURRENT_USER\Software\avsoft
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "<random>"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""

 

Related Topics :