Antivirus Soft Descriptions:
Antivirus Soft is a rogueware pretending to be legitimate, although it is nothing more than a scam. The fake application uses scare tactics to make you believe you are in trouble and you need to get the full version of it.
Once installed, Antivirus Soft starts scanning your PC and detecting many threats. In addition, you keep getting pop-ups with warnings. Don’t get trapped and don’t believe in Antivirus Soft.
Here is the full list of removal instructions.
Download SpyHunter* Spyware Detection Utility
Manual Antivirus Soft Removal Instructions:
Stop These Antivirus Soft Processes:
(Learn how to do this)
sysguard.exe
Find and Delete These Antivirus Soft Files:
(Learn how to do this)
%UserProfile%\Local Settings\Application Data\<random>\
%UserProfile%\Local Settings\Application Data\<random>\<random>sysguard.exe
%UserProfile%\Local Settings\Application Data\<random>\<random>sftav.exe
%UserProfile%\AppData\Local\<random>\
%UserProfile%\AppData\Local\<random>\<random>sysguard.exe
%UserProfile%\AppData\Local\<random>\<random>sftav.exe
Remove These Antivirus Soft Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “<random>”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “<random>”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\avsoft
Download SpyHunter* Spyware Detection Utility
No related posts.
I need to talk to someone about Windows Protection Centre
I keep getting this. easily removed and very annoying. Got it 3x just this week. As far as where it’s coming from, I think its myspace or the AV software called Prevx(demo version, trying to get me to buy?) I just uninstalled Prevx, so will see if that was it. BTW windows defender is useless!
yeah, except this doesn’t let you open regedit.
How do I know which files to delete?
I have the following files on registry editor.
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG
I’d hate to remove a file I need.
Okay just went thru it…..
RESTART machine, DURING bios load-up enter “safe mode” USUALLY “F8″ hotkey. Then START>MY COMPUTER. From here “SEARCH” the LOCAL DISK for “sftav.exe”, THERE WILL BE 3 to 6 RANDOM characters LEADING the files like this>>>(lixksftav.exe)<<<. This should find TWO files, DELETE them AND empty recycle bin. RESTART and you will now be able to run "regedit.exe" and follow the "HKEY" folder tree EXACTLY to display the entries to DELETE. DO NOT STRAY FROM THE SAMPLES AND ALL ENTRIES MAY NOT EXIST.
I can’t get into anything what do I do?
This worked. Thanks so much.
Doesn’t work for me because for some reason my keyboard wont work when I’m at the “select safe modeâ€â€¦ Anyone know why?
I was unfortunate enough to have gotten avsoft several times on my computer. The Keylogger will submit a warning everytime you attempt to open an application, and the application will fail to open. In addition to this the Avsoft keylogger will tell your computer to use a proxy server to try to access your web browser, making it impossible to access any websites except for their homepage. You can counter this by going to your internet options, then connections, then going to lan settings and unchecking the “use proxy server” key. I strongly suggest buying the pro version of malwarebytes anti malware. you can do this in safe mode if you need to. it has a registry and hardrive scanner as well as a firewall utility. If you cant afford the pro version, there is a free version that will remove the malware free of charge. Avsoft will give you roughly eight different viruses, all of which will be on your registry. So they will be impossible to manually delete or quarantine.